200-301 practice questions 521–530

1. Question 521 · 1334 in bank

   Which protocol does an access point use to draw power from a connected switch?

   • AInternet Group Management Protocol
   • BCisco Discovery Protocol
   • CAdaptive Wireless Path Protocol
   • DNeighbor Discovery Protocol

   Show answer

   Answer: B

   Explanation

   PoE switches support Cisco pre-standard PD detection mechanisms, and any Standards based compliant PDs. Most Cisco made PDs, pre-standard or standard, support Cisco Discovery Protocol (CDP). Once power is applied to a port that contains a pre-standard or standard Cisco PD, CDP is used in order to determine the actual power requirement, and the system power budget is adjusted accordingly.

   Source: Adapted from community discussion — CISCO2022

   References

   • cisco.com documentation

   Next question

2. Question 522 · 1334 in bank

   An administrator must secure the WLC from receiving spoofed association requests. Which steps must be taken to configure the WLC to restrict the requests and force the user to wait 10 ms to retry an association request?

   • AEnable MAC filtering and set the SA Query timeout to 10.
   • BEnable 802.1x Layer 2 security and set the Comeback timer to 10.
   • CEnable Security Association Teardown Protection and set the SA Query timeout to 10.
   • DEnable the Protected Management Frame service and set the Comeback timer to 10.

   Show answer

   Answer: D

   Explanation

   A is not as effective with hardening the controller and AP association requests at an enterprise level https://www.portnox.com/blog/network-security/the-truth-about-mac-spoofing/ B 802.1x is secure, encrypted and effective for client authentication especially with RADIUS config. However 802.1x/802.11x are not as specifically robust as the Protected Management Frame service mechanism and processes on WLC with 802.11w. C while Security Association is an excellent added protection with Association Comeback, this answer is wrong as the SA Query retry value is between 100 to 500 ms SA teardown protection is a mechanism to prevent replay attacks from tearing down the session of an existing client. It consists of an Association Comeback Time and an SA-Query procedure preventing spoofed association requests from disconnecting an already connected client. https://content.cisco.com/chapter.sjs?uri=/searchable/chapter/content/en/us/td/docs/wireless/controller/9800/config-guide/b_wl_16_10_cg/802-11w.html.xml

   Source: Adapted from community discussion — [Removed]

   References

   • Cisco documentation
   • Cisco documentation
   • cisco.com documentation
   • Cisco documentation

   Next question

3. Question 523 · 1334 in bank

   

   Refer to the exhibit. Only four switches are participating in the VLAN spanning-tree process. Branch-1: priority 614440 - Branch-2: priority 39391170 - Branch-3: priority 0 - Branch-4: root primary - Which switch becomes the permanent root bridge for VLAN 5?

   • ABranch-1
   • BBranch-2
   • CBranch-3
   • DBranch-4

   Show answer

   Answer: C

   Explanation

   A priority 0 means that it guarantees the switch is always the root bridge of a particular VLAN. You don't need other information.

   Source: Adapted from community discussion — LOST40

   Next question

4. Question 524 · 1334 in bank

   An engineer must configure traffic for a VLAN that is untagged by the switch as it crosses a trunk link. Which command should be used?

   • Aswitchport trunk encapsulation dot1q
   • Bswitchport trunk allowed vlan 10
   • Cswitchport mode trunk
   • Dswitchport trunk native vlan 10

   Show answer

   Answer: D

   Explanation

   "untagged by the switch" refers to the traffic that "crosses a trunk link". And the only traffic that crosses a trunk link remaining UNTAGGED is NATIVE VLAN traffic: Ref: VLAN Configuration Guide, Cisco IOS Release 15.2(7)Ex (Catalyst 1000 Switches) - Configuring VLAN Trunks [Support] - Cisco "... Configuring the Native VLAN for Untagged Traffic ... Procedure (steps 1 through 5) enable configure terminal interface gigabitethernet 1/0/2 (or interface fastethernet 1/0/2) switchport trunk native vlan 12 end ..."

   Source: Adapted from community discussion — [Removed]

   Next question

5. Question 525 · 1334 in bank

   Select 2

   What are two benefits of using the PortFast feature? (Choose two.)

   • AEnabled interfaces are automatically placed in listening state.
   • BEnabled interfaces wait 50 seconds before they move to the forwarding state.
   • CEnabled interfaces never generate topology change notifications.
   • DEnabled interfaces come up and move to the forwarding state immediately.
   • EEnabled interfaces that move to the learning state generate switch topology change notifications.

   Show answer

   Answer: CD

   Explanation

   • Interfaces with portfast enabled that come up will go to forwarding mode immediately, the interface will skip the listening and learning state. • A switch will never generate a topology change notification for an interface that has portfast enabled. https://networklessons.com/switching/cisco-portfast-configuration

   Source: Adapted from community discussion — vannplus11

   References

   • Cisco documentation

   Next question

6. Question 526 · 1334 in bank

   What is the benefit of configuring PortFast on an interface?

   • AThe frames entering the interface are marked with the higher priority and then processed faster by a switch.
   • BAfter the cable is connected, the interface is available faster to send and receive user data.
   • CReal-time voice and video frames entering the interface are processed faster.
   • DAfter the cable is connected, the interface uses the fastest speed setting available for that cable type.

   Show answer

   Answer: B

   Explanation

   B is correct - Portfast causes a switch or trunk port to enter the spanning tree forwarding state immediately, bypassing the listening and learning states.

   Source: Adapted from community discussion — Stonetales987

   Next question

7. Question 527 · 1334 in bank

   DRAG DROP - Drag and drop the functions of AAA supporting protocols from the left onto the protocols on the right. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Compare TACACS + and RADIUS - Cisco "... Compare TACACS+ and RADIUS These sections compare several features of TACACS+ and RADIUS. UDP and TCP RADIUS uses UDP while TACACS+ uses TCP. ... Packet Encryption RADIUS encrypts only the password in the access-request packet, from the client to the server...TACACS+ encrypts the entire body of the packet but leaves a standard TACACS+ header. ... Authentication and Authorization RADIUS combines authentication and authorization...TACACS+ uses the AAA architecture, which separates AAA. This allows separate authentication solutions that can still use TACACS+ for authorization and accounting. ..."

   Source: Adapted from community discussion — [Removed]

   

   Next question

8. Question 528 · 1334 in bank

   Why does a switch flood a frame to all ports?

   • AThe frame has zero destination MAC addresses.
   • BThe destination MAC address of the frame is unknown.
   • CThe source MAC address of the frame is unknown
   • DThe source and destination MAC addresses of the frame are the same.

   Show answer

   Answer: B

   Explanation

   Flooding vs Broadcast - Cisco Community Post by Kristian Alexander Brown "... Flooding is sometimes known as an unknown unicast. This happens when a switch receives a frame with a destination mac address it does not have in the CAM table. It will flood it out all ports except the receiving port of the frame. ..."

   Source: Adapted from community discussion — [Removed]

   Next question

9. Question 529 · 1334 in bank

   How do TCP and UDP differ in the way they provide reliability for delivery of packets?

   • ATCP does not guarantee delivery or error checking to ensure that there is no corruption of data, UDP provides message acknowledgement and retransmits data if lost.
   • BTCP provides flow control to avoid overwhelming a receiver by sending too many packets at once, UDP sends packets to the receiver in a continuous stream without checking.
   • CTCP is a connectionless protocol that does not provide reliable delivery of data; UDP is a connection-oriented protocol that uses sequencing to provide reliable delivery.
   • DTCP uses windowing to deliver packets reliably; UDP provides reliable message transfer between hosts by establishing a three-way handshake.

   Show answer

   Answer: B

   Explanation

   Ref: CCNA 200-301 Official Cert Guide, Volume 2 “Chapter 1. Introduction to TCP/IP Transport and Applications … Flow Control Using Windowing TCP implements flow control by using a window concept that is applied to the amount of data that can be outstanding and awaiting acknowledgment at any one point in time. … User Datagram Protocol UDP provides a service for applications to exchange messages. Unlike TCP, UDP is connectionless and provides no reliability, no windowing, no reordering of the received data, and no segmentation of large chunks of data into the right size for transmission. …”

   Source: Adapted from community discussion — [Removed]

   Next question

10. Question 530 · 1334 in bank

    An engineer configures interface Gi1/0 on the company PE router to connect to an ISP. Neighbor discovery is disabled.

    

    Which action is necessary to complete the configuration if the ISP uses third-party network devices?

    • ADisable autonegotiation.
    • BEnable LLDP globally.
    • CEnable LLDP-MED on the ISP device.
    • DDisable Cisco Discovery Protocol on the interface.

    Show answer

    Answer: B

    Explanation

    B is correct since LLDP is globally disabled by default. Check default setting for LLDP table, page 2/6 https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus9000/sw/6-x/system_management/configuration/guide/b_Cisco_Nexus_9000_Series_NX-OS_System_Management_Configuration_Guide/sm_lldp.pdf https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus9000/sw/6-x/system_management/configuration/guide/b_Cisco_Nexus_9000_Series_NX-OS_System_Management_Configuration_Guide/sm_lldp.pdf

    Source: Adapted from community discussion — AbdullahMohammad251

    References

    • Cisco documentation
    • cisco.com documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

200-301 practice, question 521. 1334 questions available.