200-301 practice questions 361–370

1. Question 361 · 1334 in bank

   SIMULATION - Guidelines - This is a lab item in which tasks will be performed on virtual devices • Refer to the Tasks tab to view the tasks for this lab item. • Refer to the Topology tab to access the device console(s) and perform the tasks. • Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window. • All necessary pre-configurations have been applied. • Do not remove any existing configurations from the devices, only those necessary to make the appropriate changes required to fulfill the listed tasks. • Do not change the enable password or hostname for any device. • Save your configurations to NVRAM before moving to the next item. • Click Next at the bottom of the screen to submit this lab and move to the next question. • When Next is clicked, the lab closes and cannot be reopened. Topology -

   

   Tasks - Task 1 - • Configure a host route on R5 for the destination of 10.200.220.6. • Configure a static default route on R1 preferring the path through R3 towards R6. • From R5, use traceroute and ping to verify the path towards and reachability of R6. Task 2 - • Configure a floating static default route on R1, preferring the path through R2 towards R6 if the link to R3 should fail. • Configure the administrative distance for 225. • Configure a static route on R2 to forward the return traffic towards 10.100.110.0/25. • After shutting interface e0/1 on R1, use traceroute and ping from R5 to verify path towards and reachability of R6.

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Task-1 R5 conf t ip route 10.200.220.6 255.255.255.255 10.100.110.1 end wr R1 conf t ip route 0.0.0.0 0.0.0.0 10.133.13.3 end wr R5 ping 10.200.220.6 traceroute 10.200.220.6 Task-2 R1 conf t ip route 0.0.0.0 0.0.0.0 10.122.12.2 225 end wr R2 conf t ip route 10.100.110.0 255.255.255.128 10.122.12.1 end wr R1 conf t interface e0/1 shut end traceroute 10.200.220.6 ping 10.200.220.6

   Source: Adapted from community discussion — dasand

   

   Next question

2. Question 362 · 1334 in bank

   Select 2

   Which two statements distinguish authentication from accounting? (Choose two.)

   • AOnly authentication supports user-activity audits.
   • BOnly authentication challenges users for their credentials and returns a response.
   • COnly authentication validates "who you are."
   • DOnly authentication records the duration of a user's connection.
   • EOnly authentication provides supporting information for billing users.

   Show answer

   Answer: BC

   Next question

3. Question 363 · 1334 in bank

   

   Refer to the exhibit. Which switch in this configuration will be elected as the root bridge? SW1: 0C:E4:82:33:62:23 - SW2: 0C:0E:16:11:05:97 - SW3: 0C:E0:16:1A:3C:9D - SW4: 0C:00:18:A1:B3:19

   • ASW1
   • BSW2
   • CSW3
   • DSW4

   Show answer

   Answer: B

   Explanation

   B) SW2 is correct, don't forget the stp priority is checked first then the lowest mac address if there's a tie. In this case there is a tie between Sw2 and Sw3 with both having priority 4096, between these two we check who has the lowest mac add which is SW2 so B is correct

   Source: Adapted from community discussion — exiledwl

   Next question

4. Question 364 · 1334 in bank

   

   Refer to the exhibit. Which switch in this configuration will be elected as the root bridge?

   • ASW1: 0C:4A:82.:65:62:72
   • BSW2: 0C:0A:A8:1A:3C:9D
   • CSW3: 0C:0A:18:81:B3:19
   • DSW4: 0C:0A:05:22:05:97

   Show answer

   Answer: D

   Next question

5. Question 365 · 1334 in bank

   

   Refer to the exhibit. All routers in the network are configured correctly, and the expected routes are being exchanged among the routers. Which set of routes are learned from neighbors and installed on router 2?

   • A10.129.9.0/23 10.139.2.0/30 10.2.191.0/30 10.129.9.0/25
   • B10.129.9.0/23 10.40.1.0/30 10.2.191.0/30 10.129.9.0/25
   • C10.40.1.0/30 10.139.2.0/30 10.2.191.0/30 10.129.9.0/25
   • D10.129.9.0/23 10.139.2.0/30 10.129.9.0/25 10.22.1.0/24

   Show answer

   Answer: A

   Explanation

   Directly connected networks for R2: 10.22.1.0/24: This is the network directly connected to R2. 10.40.1.0/30: This is the network between R2 and its WAN connection. Routes learned via neighbors: 10.139.2.0/30: This is the network between R71 and the WAN. It will be learned via the WAN. 10.2.191.0/30: This is the network between R40 and the WAN. It will be learned via the WAN. 10.129.9.0/23: This is the network behind R71. It will be learned via R71. 10.129.9.0/25: This is the network behind R40. It will be learned via R40.

   Source: Adapted from community discussion — Shaifalimittal02

   Next question

6. Question 366 · 1334 in bank

   

   Refer to the exhibit. Router-WAN1 has a new connection via Gi0/0 to the ISP. Users running the web applications indicate that connectivity is unstable to the internet. What is causing the interface issue?

   • AThe receive buffer is full due to a broadcast storm.
   • BFrames are discarded due to a half-duplex negotiation.
   • CBroadcast packets are rejected because ARP timeout is enabled.
   • DSmall frames less than 64 bytes are rejected due to size.

   Show answer

   Answer: B

   Explanation

   We can deduce that C is not the answer because: The ARP timeout controls how long an ARP entry remains in the ARP cache of a router or switch before it is removed or refreshed. - this has nothing to do with rejecting broadcasts the timer is set to 4 hours D cannot be the answer because the counter "runts" is not incremented at all. Finally, the crowd favorite, A 110 broadcasts is pretty normal for a router, if this had been going on long enough for users to report issues, then the count would be in the tens of thousands - no indication of broadcast storm the counter "no buffer" will increment when the number of packets dropped due to receive buffer being full. this output shows 0. But the output shows "full duplex"! so how could it be B? The router is set to auto negotiate the link, and if the other side is manually set to half-duplex, this can cause the router to incorrectly auto-negotiate full duplex on its side (the router is telling the other end to use full duplex, and expects it to obey, but it does not) this would explain all of the issues caused here. i agree that this is a difficult and tricky question, but i learned a lot digging into it, and i hope you do the same!

   Source: Adapted from community discussion — bezkin

   Next question

7. Question 367 · 1334 in bank

   A network engineer is configuring a new router at a branch office. The router is connected to an upstream WAN network that allows the branch to communicate with the head office. The central time server with IP address 172.24.54.8 is located behind a firewall at the head office. Which command must the engineer configure so that the software clock of the new router synchronizes with the time server?

   • Antp server 172.24.54.8
   • Bntp master 172.24.54.8
   • Cntp peer 172.24.54.8
   • Dntp client 172.24.54.8

   Show answer

   Answer: A

   Explanation

   A - 'ntp server 172.24.54.8' will let the router know where to always get its time information from. B - 'ntp master' would have set that router as a source of ntp, but we want it to get its time from Headquarters. C - 'ntp peer' would mean both routers at headquarters and branch office can get time from each other. So, the branch office router will sometimes get its time from Headquarters and sometimes it will offer time info to the headquarter router. D - 'ntp client' isn't a valid command.

   Source: Adapted from community discussion — sy0_061

   Next question

8. Question 368 · 1334 in bank

   SIMULATION - Guidelines - This is a lab item in which tasks will be performed on virtual devices • Refer to the Tasks tab to view the tasks for this lab item. • Refer to the Topology tab to access the device console(s) and perform the tasks. • Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window. • All necessary pre-configurations have been applied. • Do not change the enable password or hostname for any device. • Save your configurations to NVRAM before moving to the next item. • Click Next at the bottom of the screen to submit this lab and move to the next question. • When Next is clicked, the lab closes and cannot be reopened. Topology -

   

   Tasks - Refer to the topology. All physical cabling is in place. Configure local user account, configure a Named ACL (NACL), and Dynamic Arp Inspection. 1. Configure a local account on Sw3 with telnet access only on virtual ports 0-4. Use the following information: o Username: tech12 o Password: load1key o Algorithm type: md5 o Privilege level: Exec mode 2. Configure and apply a NACL on R1 to control network traffic towards ISP: o Name: ISP_ACL o Restrict RFC 1918 class A and B addresses o Allow all other addresses 3. A DHCP IP Pool is preconfigured on R1 for VLAN 5, and DHCP Snooping is configured on Sw2. Configure on Sw2: o Dynamic Arp Inspection for VLAN 5 o Enable validation of the ARP packet destination MAC address o Enable validation of the ARP packet source MAC address o Enable validation of the ARP Packet IP address

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Task 1 and Task 2 are incorrect : Task 1 username tech12 privilege 15 secret load1key line vty 0-4 transport input telnet Task 2 1918 RFC Class A 10.0.0.0/8 255.0.0.0 Class B 172.16.0.0/12 255.240.0.0 ip access-list standard ISP_ACL deny 10.0.0.0 0.255.255.255 deny 172.16.0.0 0.15.255.255 permit any interface e0/1 ip access-group ISP_ACL out ip arp inspection vlan 5 ip arp validate des-mac ip arp validate src-mac ip arp validate ip

   Source: Adapted from community discussion — matass_md

   

   Next question

9. Question 369 · 1334 in bank

   DRAG DROP - Drag and drop the IPv6 addresses from the left onto the corresponding address types on the right. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   

   Next question

10. Question 370 · 1334 in bank

    

    Refer to the exhibit. Which type of JSON data is represented?

    • Anumber
    • Barray
    • Cobject
    • Dstring

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

200-301 practice, question 361. 1334 questions available.