200-301 practice questions 491–500

1. Question 491 · 1334 in bank

   What is a function of Wireless LAN Controller?

   • Aregister with a single access point that controls traffic between wired and wireless endpoints
   • Buse SSIDs to distinguish between wireless clients
   • Csend LWAPP packets to access points
   • Dmonitor activity on wireless and wired LANs

   Show answer

   Answer: C

   Explanation

   Q. How does a WLC switch packets? A. All the client (802.11) packets are encapsulated in a LWAPP packet by the LAP and sent to the WLC. WLC descapsulates the LWAPP packet and acts based on the destination IP address in the 802.11 packet. If the destination is one of the wireless clients associated to the WLC, it encapsulates the packet again with the LWAPP and sends it to the LAP of the client, where it is decapsulated and sent to the wireless client. https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/69561-wlc-faq.html

   Source: Adapted from community discussion — raydel92

   References

   • Cisco documentation
   • cisco.com documentation

   Next question

2. Question 492 · 1334 in bank

   Which technology is used to improve web traffic performance by proxy caching?

   • AWSA
   • BFirepower
   • CASA
   • DFireSIGHT

   Show answer

   Answer: A

   Explanation

   Seems to be correct. Reference: https://www.cisco.com/c/en/us/products/collateral/security/web-security-appliance/guide-c07-742373.html “ 4.1 Web proxy Caching should be enabled in the web proxy configuration in order to save bandwidth and boost performance. This is becoming less important as the percentage of HTTPS traffic increases because the WSA does not by default cache HTTPS transactions. If the proxy is deployed to serve only explicit clients, forward mode should be specified in order to reject any traffic that isn’t specifically destined for the proxy service. This reduces attack surface in the appliance and follows a good security principle: If you don’t need it, turn it off. "

   Source: Adapted from community discussion — lordnano

   References

   • Cisco documentation
   • Cisco documentation

   Next question

3. Question 493 · 1334 in bank

   What criteria is used first during the root port selection process?

   • Alocal port ID
   • Blowest path cost to the toot bridge
   • Clowest neighbor's bridge ID
   • Dlowest neighbor's port ID

   Show answer

   Answer: B

   Explanation

   hi! the question asked "root port" , so B is correct, the root port are ports with the lowes path cost to the root bridge. Regards!

   Source: Adapted from community discussion — Dataset

   Next question

4. Question 494 · 1334 in bank

   Which statement about VLAN configuration is true?

   • AThe switch must be in VTP server or transparent mode before you can configure a VLAN
   • BThe switch must be in config-vlan mode before you configure an extended VLAN
   • CDynamic inter-VLAN routing is supported on VLAN2 through VLAN 4064
   • DA switch in VTP transparent mode save the VLAN databases to the running configuration only

   Show answer

   Answer: A

   Explanation

   Correct answer is a, you can only create, add, delete edit vlan in server and transparent mode, you won’t be able to create, delete vlan in client mode.

   Source: Adapted from community discussion — Nhan

   References

   • cisco.com documentation
   • cisco.com documentation

   Next question

5. Question 495 · 1334 in bank

   Select 2

   Refer to the exhibit. What two conclusions should be made about this configuration? (Choose two.)

   

   • AThe root port is FastEthernet 2/1
   • BThe designated port is FastEthernet 2/1
   • CThe spanning-tree mode is PVST+
   • DThis is a root bridge
   • EThe spanning-tree mode is Rapid PVST+

   Show answer

   Answer: AE

   Explanation

   The cost to reach the root bridge is 19, meaning that the root bridge is directly connected through a 100Mbps link. That's how you know.

   Source: Adapted from community discussion — ian77ex

   Next question

6. Question 496 · 1334 in bank

   Which function does the range of private IPv4 addresses perform?

   • Aallows multiple companies to each use the same addresses without conflicts
   • Bprovides a direct connection for hosts from outside of the enterprise network
   • Censures that NAT is not required to reach the Internet with private range addressing
   • Denables secure communications to the Internet for all external hosts

   Show answer

   Answer: A

   Explanation

   Nope. RFC1918 reserves these IP addresses for companies to use "internally". Therefore, every company can use these addresses - they will not conflict because there's no direct connectivity between the companies. Don't get me wrong - they *can* have connectivity, however that will be via NAT/PAT.

   Source: Adapted from community discussion — PaddyInNZ

   Next question

7. Question 497 · 1334 in bank

   A network engineer must create a diagram of a multivendor network. Which command must be configured on the Cisco devices so that the topology of the network is allowed to be mapped?

   • ADevice(config)#lldp run
   • BDevice(config)#cdp run
   • CDevice(config-if)#cdp enable
   • DDevice(config)#flow-sampler-map topology

   Show answer

   Answer: A

   Explanation

   cdp is cisco-proprietary whereas lldp is open standard. as well as cdp is enabled by default in all cisco devices. thus A would be the correct answer.

   Source: Adapted from community discussion — dipanjana1990

   Next question

8. Question 498 · 1334 in bank

   How do AAA operations compare regarding user identification, user services, and access control?

   • AAuthorization provides access control, and authentication tracks user services
   • BAuthentication identifies users, and accounting tracks user services
   • CAccounting tracks user services, and authentication provides access control
   • DAuthorization identifies users, and authentication provides access control

   Show answer

   Answer: B

   Explanation

   B is correct Authentication = Who are you? Authorization = Here's some things you're only allowed to do Accounting = Hmm let's see what this person is doing

   Source: Adapted from community discussion — ScorpionNet

   Next question

9. Question 499 · 1334 in bank

   What is the difference between RADIUS and TACACS+?

   • ARADIUS logs all commands that are entered by the administrator, but TACACS+ logs only start, stop, and interim commands.
   • BTACACS+ separates authentication and authorization, and RADIUS merges them.
   • CTACACS+ encrypts only password information, and RADIUS encrypts the entire payload.
   • DRADIUS is most appropriate for dial authentication, but TACACS+ can be used for multiple types of authentication.

   Show answer

   Answer: B

   Explanation

   "RADIUS combines authentication and authorization. The access-accept packets sent by the RADIUS server to the client contain authorization information. This makes it difficult to decouple authentication and authorization. TACACS+ uses the AAA architecture, which separates AAA. This allows separate authentication solutions that can still use TACACS+ for authorization and accounting. For example, with TACACS+, it is possible to use Kerberos authentication and TACACS+ authorization and accounting." Source: https://www.cisco.com/c/en/us/support/docs/security-vpn/remote-authentication-dial-user-service-radius/13838-10.html

   Source: Adapted from community discussion — schleef

   References

   • Cisco documentation

   Next question

10. Question 500 · 1334 in bank

    What is a difference between local AP mode and FlexConnect AP mode?

    • ALocal AP mode creates two CAPWAP tunnels per AP to the WLC
    • BLocal AP mode causes the AP to behave as if it were an autonomous AP
    • CFlexConnect AP mode fails to function if the AP loses connectivity with the WLC
    • DFlexConnect AP mode bridges the traffic from the AP to the WLC when local switching is configured

    Show answer

    Answer: A

    Explanation

    This link supports "A" as the answer: "In local mode, an AP creates two CAPWAP tunnels to the WLC. One is for management, the other is data traffic. This behavior is known as "centrally switched" because the data traffic is switched(bridged) from the ap to the controller where it is then routed by some routing device." https://community.cisco.com/t5/wireless-and-mobility/what-s-the-difference-between-local-mode-and-flex-connect-mode/td-p/2532657

    Source: Adapted from community discussion — dave369

    References

    • cisco.com documentation
    • Cisco documentation
    • cisco.com documentation
    • cisco.com documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

200-301 practice, question 491. 1334 questions available.