200-301 practice questions 531–540

1. Question 531 · 1334 in bank

   DRAG DROP - Drag and drop the Rapid PVST+ forwarding state actions from the left to the right. Not all actions are used. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   BPDU'S received forwarded to system module BPDU'S received from system module are processed and transmitted Switched frames from other ports are advanced The port in the forwarding state responds to netwrok management messages https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus5000/sw/layer2/503_n1_1/Cisco_n5k_layer2_config_gd_rel_503_N1_1_chapter9.html#con_1241832

   Source: Adapted from community discussion — splashy

   References

   • Cisco documentation
   • Cisco documentation

   

   Next question

2. Question 532 · 1334 in bank

   Which access point mode relies on a centralized controller for management, roaming, and SSID configuration?

   • Alightweight mode
   • Bautonomous mode
   • Cbridge mode
   • Drepeater mode

   Show answer

   Answer: A

   Explanation

   Autonomous Access Points (APs) are self-contained that do not rely on a Wireless LAN Controller (WLC), they are configured individually. There is no central monitoring or management of APs,. For Lightweight APs, the functions of an AP can be split between the AP and the WLC. Other functions are carried out by a WLC. The WLC is also sued to centrally configure the lightweight APs. Can be configured in modes such as Local or FlexConnect. Extra info because I've seen it mentioned in other questions here: WLC and lightweight APs use a protocol called CAPWAP (Control And Provisioning Of Wireless Access Points) to communicate. This is based of an older protocol, LWAPP (Lightweight Access Point Protocol). Two tunnels are created between each AP and WLC: Control Tunnel (manage operations) and Data Tunnel (traffic from wireless clients is sent through this tunnel to the WLC, it does not go direct to the wired network. Traffic here is not encrypted by default).

   Source: Adapted from community discussion — Customexit

   Next question

3. Question 533 · 1334 in bank

   

   Refer to the exhibit. A network engineer must configure communication between PC A and the File Server. To prevent interruption for any other communications, which command must be configured?

   • Aswitchport truck allowed vlan 12
   • Bswitchport truck allowed vlan none
   • Cswitchport truck allowed vlan add 13
   • Dswitchport truck allowed vlan remove 10-11

   Show answer

   Answer: C

   Explanation

   When configuring a switch interface as a trunk, unless you use the "switchport trunk allowed vlan" syntax, ALL VLANS are allowed to pass through the trunk. And this happened on Switch B, interface Gi0/1. On Switch A, interface Gi0/1 was configured to allow VLANs 10 to 12 through. But PC A (on Gi0/4) is inside VLAN 13. Then, you need to add VLAN 13 to allowed VLANs through interface Gi0/1. And the syntax is: interface GigabitEthernet0/1 switchport trunk allowed vlan add 13

   Source: Adapted from community discussion — [Removed]

   Next question

4. Question 534 · 1334 in bank

   

   Refer to the exhibit. What is the result if Gig1/11 receives an STP BPDU?

   • AThe port transitions to STP blocking.
   • BThe port immediately transitions to STP forwarding.
   • CThe port goes into error-disable state.
   • DThe port transitions to the root port.

   Show answer

   Answer: C

   Explanation

   C: BPDU Guard feature protects the port from receiving STP BPDUs, however the port can transmit STP BPDUs. When a STP BPDU is received on a BPDU Guard enabled port, the port is shutdown and the state of the port changes to ErrDis (Error-Disable) state.

   Source: Adapted from community discussion — ZUMY

   References

   • Cisco documentation

   Next question

5. Question 535 · 1334 in bank

   Which access layer threat-mitigation technique provides security based on identity?

   • ADynamic ARP Inspection
   • BDHCP snooping
   • C802.1x
   • Dusing a non-default native VLAN

   Show answer

   Answer: C

   Explanation

   Security Configuration Guide, Cisco IOS XE Amsterdam 17.1.x (Catalyst 9300 Switches) - Configuring IEEE 802.1x Port-Based Authentication [Support] – Cisco C H A P T E R 25 Configuring IEEE 802.1x Port-Based Authentication “… Port-Based Authentication Process To configure IEEE 802.1X port-based authentication, you must enable authentication, authorization, and accounting (AAA) and specify the authentication method list. A method list describes the sequence and authentication method to be queried to authenticate a user. The AAA process begins with authentication. When 802.1x port-based authentication is enabled and the client supports 802.1x-compliant client software, these events occur: - If the client identity is valid and the 802.1x authentication succeeds, the switch grants the client access to the network. …”

   Source: Adapted from community discussion — [Removed]

   Next question

6. Question 536 · 1334 in bank

   

   Refer to the exhibit. Which action do the switches take on the trunk link?

   • AThe trunk does not form, and the ports go into an err-disabled status.
   • BThe trunk forms, but the mismatched native VLANs are merged into a single broadcast domain.
   • CThe trunk forms, but VLAN 99 and VLAN 999 are in a shutdown state.
   • DThe trunk does not form, but VLAN 99 and VLAN 999 are allowed to traverse the link.

   Show answer

   Answer: B

   Explanation

   Every time i see this question... i hate it more. B is indeed the "least incorrect/bad" option but it's just a ridiculously small part of the whole answer. Meaning this would be the end result WITHOUT spanning tree existing and putting the end of the trunk that was last configured (mismatched) in a "broken status" blocking all untagged traffic on that port. Call me crazy but i hate questions where i need to envision a parallel reality where spanning tree does not yet exist.

   Source: Adapted from community discussion — splashy

   References

   • cisco.com documentation

   Next question

7. Question 537 · 1334 in bank

   Select 2

   A network engineer must configure two new subnets using the address block 10.70.128.0/19 to meet these requirements: ✑ The first subnet must support 24 hosts. ✑ The second subnet must support 472 hosts. ✑ Both subnets must use the longest subnet mask possible from the address block. Which two configurations must be used to configure the new subnets and meet a requirement to use the first available address in each subnet for the router interfaces? (Choose two.)

   • Ainterface vlan 1148 ip address 10.70.148.1 255.255.254.0
   • Binterface vlan 3002 ip address 10.70.147.17 255.255.255.224
   • Cinterface vlan 4722 ip address 10.70.133.17 255.255.255.192
   • Dinterface vlan 1234 ip address 10.70.159.1 255.255.254.0
   • Einterface vlan 155 ip address 10.70.155.65 255.255.255.224

   Show answer

   Answer: AE

   Explanation

   Adding my answer since there is so much confusion. Remove C because VLAN ranges are 1-1005 and 1006-4094. !The requirement is to use the first available address in each subnet! For A, the network address is .148.0. The first available is 148.1. 255.255.254.0 is /23, we have 512 addresses so we are good on the 472 host requirement. For B, 10.70.147.1 is the first address. So no. For D, (we already decided on A but we'll do this anyway) 10.70.158.1 is our first. Not 159.1. For E, .64 is our network, .65 is our first. This works. .224 is /27 which gives us 32 total addresses, more than we need. I highly recommend watching 'Subnetting Mastery' youtube playlist for learn how to subnet fast.

   Source: Adapted from community discussion — Customexit

   Next question

8. Question 538 · 1334 in bank

   

   Refer to the exhibit. An administrator must configure interfaces Gi1/1 and Gi1/3 on switch SW11. PC-1 and PC-2 must be placed in the Data VLAN, and Phone-1 must be placed in the Voice VLAN. Which configuration meets these requirements?

   • Ainterface gigabitethernet1/1 switchport mode access switchport access vlan 8 ! interface gigabitethernet1/3 switchport mode access switchport access vlan 8 switchport voice vlan 9
   • Binterface gigabitethernet1/1 switchport mode access switchport access vlan 8 ! interface gigabitethernet1/3 switchport mode trunk switchport trunk vlan 8 switchport voice vlan 9
   • Cinterface gigabitethernet1/1 switchport mode access switchport access vlan 9 ! interface gigabitethernet1/3 switchport mode trunk switchport trunk vlan 8 switchport trunk vlan 9
   • Dinterface gigabitethernet1/1 switchport mode access switchport access vlan 8 ! interface gigabitethernet1/3 switchport mode access switchport voice vlan 8 switchport access vlan 9

   Show answer

   Answer: A

   Explanation

   Some times identation helps interface gigabitethernet1/1 switchport mode access switchport access vlan 8 interface gigabitethernet1/3 switchport mode access switchport access vlan 8 switchport voice vlan 9

   Source: Adapted from community discussion — mfaria

   Next question

9. Question 539 · 1334 in bank

   

   Refer to the exhibit. Users need to connect to the wireless network with IEEE 802.11r-compatible devices. The connection must be maintained as users travel between floors or to other areas in the building. What must be the configuration of the connection?

   • ADisable AES encryption.
   • BEnable Fast Transition and select the FT 802.1x option.
   • CEnable Fast Transition and select the FT PSK option.
   • DSelect the WPA Policy option with the CCKM option.

   Show answer

   Answer: C

   Explanation

   Ok, I'm going to take a swing a this... So, the question specifically states compatible devices "Users need to connect to the wireless network with IEEE 802.11r-COMPATIBLE DEVICES." According to the reference link, it states "If clients do not support mixed mode or 802.11r join, they can join non-802.11r WLANs. When you configure FT PSK and later define PSK, clients that can join only PSK can now join the WLAN in mixed mode." Therefore, if you want to configure Fast Transition with COMPATIBLE DEVICES, select the FT 802.1X option. If they are non-compatible they can still join by utilizing the Pre-shared key (if selected). Consequently, I believe B is correct.

   Source: Adapted from community discussion — Networknovice

   References

   • Cisco documentation

   Next question

10. Question 540 · 1334 in bank

    Select 2

    What are two differences between optical-fiber cabling and copper cabling? (Choose two.)

    • AA BNC connector is used for fiber connections
    • BThe glass core component is encased in a cladding
    • CThe data can pass through the cladding
    • DLight is transmitted through the core of the fiber
    • EFiber connects to physical interfaces using RJ-45 connections

    Show answer

    Answer: BD

    Explanation

    For lazy people who hate this kind of stupid question in CCNA but has a heart of curiosity, I do some simple research for you. Please correct me if any incorrect stuffy 1.There are 3 kind of wiring mainly when we talk about networking: Fiber, Coaxial cable, twisted pair. The last 2 are Copper wiring 2. BNC Connector is for Coaxial Cable, so A is wrong 3.the structure of fiber is: Jacket encase Buffer, Buffer encase Cladding, Cladding encase core. We uses light to transmit data through the core. Therefore B and D are right, C is wrong 4. RJ45 is a connector is for twisted pair, so E is wrong

    Source: Adapted from community discussion — Raymond9

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

200-301 practice, question 531. 1334 questions available.