200-301 practice questions 1,321–1,330

1. Question 1321 · 1334 in bank

   What is a characteristic of RSA?

   • AIt uses preshared keys for encryption.
   • BIt is an asymmetric encryption algorithm.
   • CIt is a symmetric decryption algorithm.
   • DIt requires both sides to have identical keys for encryption.

   Show answer

   Answer: B

   Explanation

   RSA (Rivest-Shamir-Adleman) is an asymmetric encryption algorithm, which is a type of public-key cryptography. In asymmetric encryption, a public key is used for encryption, and a private key is used for decryption. The two keys are mathematically related, but it is computationally infeasible to derive the private key from the public key. Option B, "It is an asymmetric encryption algorithm", is therefore the correct answer.

   Source: Adapted from community discussion — Ciscoman021

   Next question

2. Question 1322 · 1334 in bank

   Select 2

   What are two differences between WPA2 and WPA3 wireless security? (Choose two.)

   • AWPA2 uses 192-bit key encryption, and WPA3 requires 256-bit key encryption.
   • BWPA3 uses AES for stronger protection than WPA2, which uses SAE.
   • CWPA2 uses 128-bit key encryption, and WPA3 supports 128-bit and 192-bit key encryption.
   • DWPA3 uses SAE for stronger protection than WPA2, which uses AES.
   • EWPA3 uses AES for stronger protection than WPA2, which uses TKIP.

   Show answer

   Answer: CD

   Explanation

   WPA2 uses 128-bit key encryption with AES, while WPA3 supports 128-bit and 192-bit key encryption with AES and the new SAE protocol for key establishment.

   Source: Adapted from community discussion — mageknight

   References

   • Cisco documentation
   • Cisco documentation

   Next question

3. Question 1323 · 1334 in bank

   What is an enhancement implemented in WPA3?

   • Aapplies 802.1x authentication and AES-128 encryption
   • Bemploys PKI and RADIUS to identify access points
   • Cuses TKIP and per-packet keying
   • Ddefends against deauthentication and disassociation attacks

   Show answer

   Answer: D

   Explanation

   D is correct: Additionally, WPA3 personal and enterprise connections requires PMF (Protected Management Frame) negotiation mandatorily. PMF provides an additional layer of protection from de-authentication and disassociation attacks.

   Source: Adapted from community discussion — Goena

   Next question

4. Question 1324 · 1334 in bank

   Which action must be taken when password protection is implemented?

   • AUse less than eight characters in length when passwords are complex.
   • BInclude special characters and make passwords as long as allowed.
   • CShare passwords with senior IT management to ensure proper oversight.
   • DStore passwords as contacts on a mobile device with single-factor authentication.

   Show answer

   Answer: B

   Next question

5. Question 1325 · 1334 in bank

   DRAG DROP - Drag and drop the statements about AAA from the left onto the corresponding AAA services on the right. Not all options are used.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   

   Next question

6. Question 1326 · 1334 in bank

   DRAG DROP - Drag and drop the IPv6 addresses from the left onto the corresponding address types on the right. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   the address 3ffe:e54d:620:a87a::f00d might have been considered a global unicast address during the 6bone testing period, it is not considered a valid global unicast address in the current IPv6 address space.

   Source: Adapted from community discussion — Danielki

   

   Next question

7. Question 1327 · 1334 in bank

   An engineer must configure R1 for a new user account. The account must meet these requirements: • It must be configured in the local database. • The username is engineer2. • It must use the strongest password configurable. Which command must the engineer configure on the router?

   • AR1(config)# username engineer2 privilege 1 password 7 test2021
   • BR1(config)# username engineer2 secret 4 $1$b1Ju$kZbBS1Pyh4QzwXyZ
   • CR1(config)# username engineer2 algorithm-type scrypt secret test2021
   • DR1(config)# username engineer2 secret 5 password $1$b1Ju$kZbBS1Pyh4QzwXyZ

   Show answer

   Answer: C

   Explanation

   A. CAT9200(config)#username engineer2 privilege 1 password 7 test2021 Invalid encrypted password: test2021 B. CAT9200(config)#username engineer2 secret 4 $1$b1Ju$kZbBS1Pyh4QzwXyZ ERROR: Type 4 passwords have been deprecated. Migrate to a supported password type C. CAT9200(config)#username engineer2 algorithm-type scrypt secret test2021 CAT9200(config)#do show run | inc engineer2 username engineer2 secret 9 $9$2FTH4wYx6hzf1X$1WVSI21bbXZ7JlP5v42YDvImoHd6DTHW5pcm4J0Iy8A CAT9200(config)# D. CAT9200(config)#username engineer2 secret 5 password $1$b1Ju$kZbBS1Pyh4QzwXyZ % Ambiguous command: "username engineer2 secret 5 password $1$b1Ju$kZbBS1Pyh4QzwXyZ" CAT9200(config)# The only opcion that run is opcion C. I configured the user and pass, and when I did "show run", the passsword was encrypt.

   Source: Adapted from community discussion — mcontento

   References

   • Cisco documentation
   • cisco.com documentation
   • Cisco documentation

   Next question

8. Question 1328 · 1334 in bank

   Select 2

   Which two VPN technologies are recommended by Cisco for multiple branch offices and large-scale deployments? (Choose two.)

   • AGETVPN
   • BDMVPN
   • Csite-to-site VPN
   • Dclientless VPN
   • EIPsec remote access

   Show answer

   Answer: AB

   Explanation

   Here we go again. Cisco will give you 3 correct answers and ask for the best 2 out of the 3. Cisco is not really concerned if you can implement or repair their technology only that you fail the test the first, maybe more, times around. I think AB is correct. C is technically correct too. https://www.cisco.com/c/dam/en/us/products/collateral/ios-nx-os-software/enterprise-class-teleworker-ect-solution/prod_brochure0900aecd80582078.pdf chrome-extension://efaidnbmnnnibpcajpcglclefindmkaj/https://www.cisco.com/c/dam/en/us/products/collateral/ios-nx-os-software/enterprise-class-teleworker-ect-solution/prod_brochure0900aecd80582078.pdf

   Source: Adapted from community discussion — JJY888

   References

   • Cisco documentation

   Next question

9. Question 1329 · 1334 in bank

   DRAG DROP - Drag and drop the statements about AAA services from the left onto the corresponding AAA services on the right. Not all options are used.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   The answer is wrong. It should be... Acounting: it records the duration of each connection and it supports user access reporting. Authorization: it limits the services available to a user and it grants access to network assets, such as FTP Servers.

   Source: Adapted from community discussion — sdmejia01

   

   Next question

10. Question 1330 · 1334 in bank

    What is used as a solution for protecting an individual network endpoint from attack?

    • Aantivirus software
    • Bwireless controller
    • Crouter
    • DCisco DNA Center

    Show answer

    Answer: A

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

200-301 practice, question 1321. 1334 questions available.