200-301 practice questions 511–520

1. Question 511 · 1334 in bank

   An engineer must establish a trunk link between two switches. The neighboring switch is set to trunk or desirable mode. What action should be taken?

   • Aconfigure switchport nonegotiate
   • Bconfigure switchport mode dynamic desirable
   • Cconfigure switchport mode dynamic auto
   • Dconfigure switchport trunk dynamic desirable

   Show answer

   Answer: B

   Explanation

   When connecting two switches via a trunk link, it's crucial to decide the switchport mode settings. Given that the neighboring switch is set to trunk or desirable mode, you should configure the local switch to a mode that enables successful negotiation. Modes dynamic desirable and dynamic auto will try to convert the link to a trunk link if the neighboring port is set to trunk, dynamic desirable, or dynamic auto. Since the neighboring switch is already set to desirable mode, which actively attempts to convert the link into a trunk, you should configure switchport mode dynamic desirable (option 2). This way, the local switch will also actively attempt to convert the link to a trunk link, which will ensure a successful trunk link establishment as both sides are actively negotiating for it.

   Source: Adapted from community discussion — [Removed]

   References

   • cisco.com documentation
   • Cisco documentation

   Next question

2. Question 512 · 1334 in bank

   Which spanning-tree enhancement avoids the learning and listening states and immediately places ports in the forwarding state?

   • ABPDUfilter
   • BPortFast
   • CBackbonefast
   • DBPDUguard

   Show answer

   Answer: B

   Explanation

   The correct answer is B. PortFast. PortFast is a feature in the Spanning Tree Protocol (STP) that is used to quickly transition a port from the blocking state to the forwarding state. This feature is typically used for access ports that connect to end devices (such as PCs or servers), which do not generate Spanning Tree Protocol (BPDUs) messages. By using PortFast, the STP learning and listening states are skipped and the port is immediately placed into the forwarding state, reducing the amount of time it takes for the port to transition from a blocking to a forwarding state.

   Source: Adapted from community discussion — ricky1802

   Next question

3. Question 513 · 1334 in bank

   How does the dynamically-learned MAC address feature function?

   • AThe CAM table is empty until ingress traffic arrives at each port
   • BSwitches dynamically learn MAC addresses of each connecting CAM table.
   • CThe ports are restricted and learn up to a maximum of 10 dynamically-learned addresses
   • DIt requires a minimum number of secure MAC addresses to be filled dynamically

   Show answer

   Answer: A

   Explanation

   A is more suitable When a switch is powered on or reset, its Content Addressable Memory (CAM) table, which stores MAC address/port mappings, is initially empty. As traffic enters each port (ingress traffic), the switch dynamically learns and records the MAC addresses of the devices connected to those ports.

   Source: Adapted from community discussion — [Removed]

   References

   • Cisco documentation
   • Cisco documentation

   Next question

4. Question 514 · 1334 in bank

   When using Rapid PVST+, which command guarantees the switch is always the root bridge for VLAN 200?

   • Aspanning-tree vlan 200 priority 614440
   • Bspanning-tree vlan 200 priority 0
   • Cspanning-tree vlan 200 root primary
   • Dspanning-tree vlan 200 priority 38813258

   Show answer

   Answer: B

   Explanation

   About root primary command: https://community.cisco.com/t5/switching/spanning-tree-vlan-root-primary/td-p/1269595 Paraphrasing from this source: The "spanning-tree root primary" command is actually a macro and it is executed only one time. If after this somebody configures another device with a lower priority, this node cannot react to this and it will lose its root bridge role. If you use "spanning-tree vlan 1 priority 0", only another device with pri 0 and a lower MAC address can take the role of root bridge.

   Source: Adapted from community discussion — oatmealturkey

   References

   • cisco.com documentation
   • Cisco documentation

   Next question

5. Question 515 · 1334 in bank

   

   Refer to the exhibit. Which command must be executed for Gi1/1 on SW1 to passively become a trunk port if Gi1/1 on SW2 is configured in desirable or trunk mode?

   • Aswitchport mode dynamic auto
   • Bswitchport mode dot1-tunnel
   • Cswitchport mode dynamic desirable
   • Dswitchport mode trunk

   Show answer

   Answer: A

   Explanation

   another bad q: " SW2 is configured in desirable or trunk mode" Saying that IF: SW1 dynamic auto - SW2 dynamic desirable -> trunk = thats fine BUT SW1 dynamic auto - SW2 trunk -> will not create a trunk I assume they expect answer "A" SW1 dynamic auto

   Source: Adapted from community discussion — Ceruzka

   Next question

6. Question 516 · 1334 in bank

   

   Refer to the exhibit. The entire contents or the MAC address table are shown. Sales-4 sends a data frame to Sales-1.

   

   What does the switch do as it receives the frame from Sales-4?

   • AMap the Layer 2 MAC address to the Layer 3 IP address and forward the frame.
   • BInsert the source MAC address and port into the forwarding table and forward the frame to Sales-1.
   • CPerform a lookup in the MAC address table and discard the frame due to a missing entry.
   • DFlood the frame out of all ports except on the port where Sales-1 is connected.

   Show answer

   Answer: B

   Explanation

   >>> "In the exhibit you can see that laptop 4 is not in the table, so the switch needs to find where is it by flooding all ports except the one the petition came from". This would be the case if Sales-1 were trying to frames to Sales-4, but it is the other way around, Sales-4 is sending to Sales-1. The switch does not currently have an entry for Sales-4's MAC address, so it will add it and then send a Layer 2 unicast to Sales-1 (because it already has an entry mapped for it).

   Source: Adapted from community discussion — UmbertoReed

   Next question

7. Question 517 · 1334 in bank

   

   Refer to the exhibit. An engineer must configure GigabitEthernet1/1 to accommodate voice and data traffic. Which configuration accomplishes this task?

   • Ainterface gigabitethernet1/1 switchport mode access switchport access vlan 300 switchport voice vlan 400
   • Binterface gigabitethernet1/1 switchport mode trunk switchport trunk vlan 300 switchport trunk vlan 400
   • Cinterface gigabitethernet1/1 switchport mode access switchport voice vlan 300 switchport access vlan 400
   • Dinterface gigabitethernet1/1 switchport mode trunk switchport trunk vlan 300 switchport voice vlan 400

   Show answer

   Answer: A

   Explanation

   While A seems to be incorrect syntax and an invalid command line, of the choices listed A is the best answer. https://www.learncisco.net/courses/icomm-ccna-voice/cisco-uc-solution-maintenance/switch-configuration.html#:~:text=Cisco%20allows%20us%20to%20have%20two%20VLANs%20connected%20to%20one%20port%2C%20it%27s%20a%20multi-VLAN%20access%20port.%20And%20Cisco%20allows%20us%20to%20bend%20the%20rules%20if%20and%20only%20if%20one%20of%20those%20two%20VLANs%20is%20a%20voice%20VLAN https://community.cisco.com/t5/switching/subinterface-to-access-port/td-p/3804800 https://www.reddit.com/r/networking/comments/m5ruhr/8021x_and_allowing_phones_on_voice_vlan/ https://www.cisco.com/c/en/us/support/docs/switches/catalyst-2950-series-switches/113260-voice-vlan-00.html#:~:text=Configure%20specified%20VLANs%20for%20voice%20and%20data%20traffic https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2960/software/release/12-2_40_se/configuration/guide/scg/swvoip.pdf

   Source: Adapted from community discussion — [Removed]

   References

   • Cisco documentation
   • cisco.com documentation
   • cisco.com documentation
   • cisco.com documentation
   • Cisco documentation

   Next question

8. Question 518 · 1334 in bank

   Select 2

   Several new coverage cells are required to improve the Wi-Fi network of an organization. Which two standard designs are recommended? (Choose two.)

   • A5GHz provides increased network capacity with up to 23 nonoverlapping channels.
   • B5GHz channel selection requires an autonomous access point.
   • CCells that overlap one another are configured to use nonoverlapping channels.
   • DAdjacent cells with overlapping channels use a repeater access point.
   • EFor maximum throughput, the WLC is configured to dynamically set adjacent access points to the channel.

   Show answer

   Answer: AC

   Explanation

   If I have understood correctly, C and E have somehow the same meaning: avoid signal overlapping, since E separate the channel to avoid using the same channel and having signal collision. See "Dynamic Channel Assignment" in https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-5/config-guide/b_cg85/radio_resource_management.html A and B are kind of tricky to mention 5GHz, which must have non-overlapping channels, and actually accomplish what C/E have done, but they're saying incorrect stuff. For A: 2.4GHz has 11 Channels, 5GHZ has 45 Channels For B: There are two types of APs: autonomous AP/controllerless AP/"Fat AP" and lightweight AP/AP with Controller. Ref:https://stormwindstudios.com/wireless-access-points/ And lightweight AP can be applied to 2.4GHz and 5Hz (there's command for both in cisco lightweight AP, just google it.... For D: I think the repeater cannot solve the problem of "overlapping channels" since it just re-transmit or "repeat" the signal, aka the overlapping channels will still be overlapping!

   Source: Adapted from community discussion — Raymond9

   References

   • Cisco documentation
   • Cisco documentation

   Next question

9. Question 519 · 1334 in bank

   An engineer needs to add an old switch back into a network. To prevent the switch from corrupting the VLAN database, with action must be taken?

   • AAdd the switch in the VTP domain with a lower revision number.
   • BAdd the switch in the VTP domain with a higher revision number.
   • CAdd the switch with DTP set to dynamic desirable.
   • DAdd the switch with DTP set to desirable.

   Show answer

   Answer: A

   Explanation

   One danger of VTP: If you connect an old switch with a higher revision number to your network (and the VTP domain name matches), all switches in the domain will sync their VLAN database to that switch.

   Source: Adapted from community discussion — Customexit

   References

   • Cisco documentation

   Next question

10. Question 520 · 1334 in bank

    Which technology prevents client devices from arbitrarily connecting to the network without state remediation?

    • A802.11n
    • B802.1x
    • CMAC Authentication Bypass
    • DIP Source Guard

    Show answer

    Answer: B

    Explanation

    The correct answer is B. 802.1x. Explanation: 802.1x is a port-based authentication protocol that prevents unauthorized devices from gaining access to the network. It requires clients to authenticate before being granted access. This technology is commonly used for controlling access to wireless and wired networks. Explanation for other options: A. 802.11n: 802.11n is a wireless standard and not specifically designed for preventing unauthorized access to the network. C. MAC Authentication Bypass: MAC Authentication Bypass allows devices with specific MAC addresses to bypass 802.1x authentication. While it provides a level of control, it does not offer the same level of security as 802.1x. D. IP Source Guard: IP Source Guard is a feature that helps prevent IP address spoofing attacks but is not primarily designed for controlling access to the network based on device authenticatio

    Source: Adapted from community discussion — Cyber15

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

200-301 practice, question 511. 1334 questions available.