200-301 practice questions 231–240

1. Question 231 · 1334 in bank

   Which type of wired port is required when an AP offers one unique SSID, passes client data and management traffic, and is in autonomous mode?

   • Atrunk
   • Bdefault
   • Caccess
   • DLAG

   Show answer

   Answer: A

   Explanation

   here are the relevant Cisco documentation links that discuss the requirement of a trunk port when an Access Point (AP) is in autonomous mode and offers one unique SSID while passing both client data and management traffic: Cisco IOS Configuration Guide for Autonomous Aironet Access Points Overview of Access Point Features What the difference when APs are connected to a Access port or a trunk Configure SSID on Autonomous AP These documents provide detailed information about the configuration and operation of APs in autonomous mode, including the requirement for a trunk port under certain conditions. Please review these resources for more information.

   Source: Adapted from community discussion — lmmujsi

   Next question

2. Question 232 · 1334 in bank

   

   Refer to the exhibit. A network engineer must configure the WLC to allow only DHCP and DNS packets for User1 and User2. Which configuration must be used?

   • AEnable Web Authentication for 802.1X standard in the Layer 2 Security configuration
   • BEnable Fallback Policy with MAC filtering under the Layer 3 Security configuration
   • CEnable Web policy and Authentication in the Layer 3 Security configuration.
   • DEnable Web Authentication under the AAA Server configuration on the WLAN.

   Show answer

   Answer: C

   Explanation

   None of the provided options directly address the specific task of allowing only DHCP and DNS packets. However, configuring Layer 3 security with web policy and authentication (Option C) is related to controlling access on the network at Layer 3, which could involve the use of ACLs to restrict traffic types[3]. Yet, this option does not specifically mention the use of ACLs for controlling DHCP and DNS traffic, which is the core requirement. To specifically allow only DHCP and DNS packets, you would typically: 1. Create ACLs that permit traffic on the ports used by DHCP (ports 67 and 68) and DNS (port 53). 2. Apply these ACLs to the user profiles or WLANs that User1 and User2 are associated with, ensuring that only DHCP and DNS traffic is allowed while all other traffic types are denied.

   Source: Adapted from community discussion — Starlord2535

   Next question

3. Question 233 · 1334 in bank

   Which connection type is used when an engineer connects to an AP without a configured IP address or dial-up number to manage the device?

   • AAUX
   • BEthernet
   • CVIY
   • Dconsole

   Show answer

   Answer: D

   Explanation

   When an engineer connects to an access point (AP) for management purposes without a configured IP address or dial-up number, they typically use the console connection. The console connection is established through the AP's console port using a serial cable. Therefore, the correct answer is: D. console

   Source: Adapted from community discussion — KAM2023

   Next question

4. Question 234 · 1334 in bank

   What is a function of a firewall on an enterprise network?

   • AIt allows and denies ingress and egress traffic.
   • BIt serves as a default gateway to hosts on the internet.
   • CIt processes traffic based on stateless inspection.
   • DIt acts as the intermediary device between the enterprise and its ISP.

   Show answer

   Answer: A

   Next question

5. Question 235 · 1334 in bank

   Which protocol is implemented when an organization must verify network performance, troubleshoot issues, and use an agent to communicate between monitoring tools and end devices?

   • AFIP
   • BNIP
   • CNFS
   • DSNMP

   Show answer

   Answer: D

   Next question

6. Question 236 · 1334 in bank

   What is a difference between an IPv6 multicast address and an IPv6 anycast address?

   • AAn IPv6 multicast address uses the prefix 2002::/15 and forwards to one destination, and an IPv6 anycast address uses the prefix ff00:/8 and forwards to any destination in a group.
   • BA packet sent to an IPv6 multicast address is delivered to one or more destinations at once, but a packet sent to an IPv6 anycast address is routed to the closest interface with that address.
   • CIPV6 multicast addresses are used to transition from IPv4 to IPv6, and IPv6 anycast addresses are used for address aggregation in an IPv6-only environment.
   • DAn IPV6 multicast address is assigned to numerous interfaces within a subnet, but an IPv6 anycast address is used for a predefined group of nodes in an all-IPv6 routers group.

   Show answer

   Answer: B

   Explanation

   In IPv6, a multicast address is used to deliver packets to multiple nodes in a group, whereas an anycast address is used to route a packet to the nearest (or best) interface among a group of interfaces that share the same anycast address. Anycast is typically used for services where the closest instance can respond to a request, providing a form of load balancing and redundancy.

   Source: Adapted from community discussion — KAM2023

   Next question

7. Question 237 · 1334 in bank

   Which syslog message logging level displays interface line protocol up/down events?

   • Ainformational
   • Balerts
   • Cdebugging
   • Dnotifications

   Show answer

   Answer: D

   Explanation

   Correct, D "Interface up or down transitions and system restart messages, displayed at the notifications level: this message is only for information; access point functionality is not affected. " https://www.cisco.com/c/en/us/td/docs/routers/access/wireless/software/guide/SysMsgLogging.html

   Source: Adapted from community discussion — AA4534

   References

   • Cisco documentation

   Next question

8. Question 238 · 1334 in bank

   Which device protects an internal network from the Internet?

   • Arouter
   • Bfirewall
   • Caccess point
   • DLayer 2 switch

   Show answer

   Answer: B

   Next question

9. Question 239 · 1334 in bank

   Which encryption mode is used when a packet is sent from a site-to-site VPN connection where the source and destination IP address portion of a packet is unencrypted?

   • APPTP
   • BSecure Shell
   • CTransport
   • DPPPoE

   Show answer

   Answer: C

   Explanation

   In transport mode, only the payload (the actual data being transferred) of the IP packet is encrypted, leaving the header (which includes the source and destination IP addresses) unencrypted.

   Source: Adapted from community discussion — KAM2023

   Next question

10. Question 240 · 1334 in bank

    What is a reason why an administrator would choose to implement an automated network management approach?

    • AEnable "box by box" configuration and deployment.
    • BDecipher simple password policies.
    • CReduce inconsistencies in the network configuration.
    • DIncrease recurrent management costs.

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

200-301 practice, question 231. 1334 questions available.