200-301 practice questions 581–590

1. Question 581 · 1334 in bank

   

   Refer to the exhibit. A network engineer must update the configuration on Switch2 so that it sends LLDP packets every minute and the information sent via LLDP is refreshed every 3 minutes. Which configuration must the engineer apply?

   • ASwitch2(config)#lldp timer 60 Switch2(config)#lldp tlv-select 180
   • BSwitch2(config)#lldp timer 60 Switch2(config)#lldp holdtime 180
   • CSwitch2(config)#lldp timer 1 Switch2(config)#lldp holdtime 3
   • DSwitch2(config)#lldp timer 1 Switch2(config)#lldp tlv-select 3

   Show answer

   Answer: B

   Explanation

   To update Switch2’s configuration so that it sends LLDP packets every minute and refreshes the information every 3 minutes, the network engineer should apply option B: Switch2(config)#lldp timer 60 Switch2(config)#lldp holdtime 180 This sets the LLDP advertisement interval to 60 seconds (1 minute) and the hold time to 180 seconds (3 minutes).

   Source: Adapted from community discussion — bri24838

   Next question

2. Question 582 · 1334 in bank

   

   Refer to the exhibit. Switch A is newly configured. All VLANs are present in the VLAN database. The IP phone and PC A on Gi0/1 must be configured for the appropriate VLANs to establish connectivity between the PCs. Which command set fulfills the requirement?

   • ASwitchA(config-if)#switchport mode access SwitchA(config-if)#switchport access vlan 50 SwitchA(config-if)#switchport voice vlan 51
   • BSwitchA(config-if)#switchport mode trunk SwitchA(config-if)#switchport trunk allowed vlan add 50, 51 SwitchA(config-if)#switchport voice vlan dot1p
   • CSwitchA(config-if)#switchport mode trunk SwitchA(config-if)#switchport trunk allowed vlan 50, 51 SwitchA(config-if)#mis qos trust cos
   • DSwitchA(config-if)#switchport mode access SwitchA(config-if)#switchport access vlan 50 SwitchA(config-if)#switchport voice vlan untagged

   Show answer

   Answer: A

   Explanation

   Answer A https://networklessons.com/cisco/ccna-routing-switching-icnd1-100-105/voice-vla First, we have to create the two VLANs: SW1(config)#vlan 100 SW1(config-vlan)#name COMPUTER SW1(config-vlan)#exit SW1(config)#vlan 101 SW1(config-vlan)#name VOIP SW1(config-vlan)#exit Now we can configure the interface: SW1(config)#interface GigabitEthernet 0/1 SW1(config-if)#switchport mode access SW1(config-if)#switchport access vlan 100 SW1(config-if)#switchport voice vlan 101 SW1(config-if)#exit We configure the interface in access mode and use VLAN 100 for the computer. The switchport voice vlan command tells the switch to use VLAN 101 as the voice VLAN.

   Source: Adapted from community discussion — Goh0503

   Next question

3. Question 583 · 1334 in bank

   

   Refer to the exhibit. Two new switches are being installed. The remote monitoring team uses the support network to monitor both switches. Which configuration is the next step to establish a Layer 2 connection between the two PCs?

   • ASwitchA(config)#interface GigabitEthernet0/1 SwitchA(config-if)#switchport access vlan 500 SwitchB(config)#interface GigabitEthernet0/1 SwitchB(config-if)#switchport access vlan 500
   • BSwitchA(config)#interface GigabitEthernet0/1 SwitchA(config-if)#switchport mode trunk SwitchB(config)#interface GigabitEthernet0/1 SwitchB(config-if)#switchport mode trunk
   • CSwitchA(config)#interface GigabitEthernet0/0 SwitchA(config-if)#switchport trunk allowed vlan 500, 550 SwitchB(config)#interface GigabitEthernet0/0 SwitchB(config-if)#switchport trunk allowed vlan 500, 550
   • DSwitchA(config)#interface GigabitEthernet0/0 SwitchA(config-if)#spanning-tree portfast SwitchA(config-if)#spanning-tree bpduguard enable SwitchB(config)#interface GigabitEthernet0/0 SwitchB(config-if)#spanning-tree portfast SwitchB(config-if)#spanning-tree bpduguard enable

   Show answer

   Answer: A

   Explanation

   A is correct. Remember: A trunk port will carry all VLANs by default. "Allowed VLANs on a Trunk By default, a trunk port sends traffic to and receives traffic from all VLANs. All VLAN IDs, 1 to 4094, are allowed on each trunk. " https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2960x/software/15-0_2_EX/vlan/configuration_guide/b_vlan_152ex_2960-x_cg/b_vlan_152ex_2960-x_cg_chapter_0100.pdf Answer C is incorrect because the access ports connecting to the PC's are never configured, but the trunk connections are limited to the specified VLANs, meaning there's no connectivity. However, the question is broken, as ususal. The two PC's already have L2 connectivity without *any* further configuration...test it in Packet Tracer.

   Source: Adapted from community discussion — [Removed]

   References

   • Cisco documentation

   Next question

4. Question 584 · 1334 in bank

   Select 2

   What are two descriptions of three-tier network topologies? (Choose two.)

   • AThe distribution layer runs Layer 2 and Layer 3 technologies
   • BThe network core is designed to maintain continuous connectivity when devices fail
   • CThe access layer manages routing between devices in different domains
   • DThe core layer maintains wired connections for each host
   • EThe core and distribution layers perform the same functions

   Show answer

   Answer: AB

   Explanation

   Access: Provides a connection point (access) for end-user devices. Does not forward frames between two other access switches under normal circumstances. Distribution: Provides an aggregation point for access switches, providing connectivity to the rest of the devices in the LAN, forwarding frames between switches, but not connecting directly to end-user devices. The distribution layer is where redistribution of routing protocols should be performed. It should never be performed at the core or access layer. Core: Aggregates distribution switches in very large campus LANs, providing very high forwarding rates for the larger volume of traffic due to the size of the network. Only switching between campus (distribution) switches should be performed at the core layer. Nothing should be done to slow down forwarding of traffic, such as using ACLs, supporting clients, or routing between VLANs Core layer switches are commonly set up in a star topology. This is because core layer switches connect multiple campuses via distribution layer switches

   Source: Adapted from community discussion — alexiro

   Next question

5. Question 585 · 1334 in bank

   

   Refer to the exhibit. An engineer is configuring a new Cisco switch, NewSW, to replace SW2. The details have been provided: ✑ Switches SW1 and SW2 are third-party devices without support for trunk ports. ✑ The existing connections must be maintained between PC1, PC2, and PC3. ✑ Allow the switch to pass traffic from future VLAN 10. Which configuration must be applied?

   • ANewSW(config)#interface f0/0 NewSW(config-if)#switchport mode trunk NewSW(config-if)#switchport trunk native vlan 10 NewSW(config-if)#switchport trunk native vlan 10
   • BNewSW(config)#interface f0/0 NewSW(config-if)#switchport mode access NewSW(config-if)#switchport trunk allowed vlan 2, 10 NewSW(config-if)#switchport trunk native vlan 2
   • CNewSW(config)#interface f0/0 NewSW(config-if)#switchport mode access NewSW(config-if)#switchport trunk allowed vlan 2, 10 NewSW(config-if)#switchport trunk native vlan 10
   • DNewSW(config)#interface f0/0 NewSW(config-if)#switchport mode trunk NewSW(config-if)#switchport trunk allowed vlan 2, 10 NewSW(config-if)#switchport trunk native vlan 2

   Show answer

   Answer: D

   Explanation

   I tested this in packet tracer, feel free to try it yourselfs, the correct answer is D! Nothing says that the new switch doesn't allow trunking. It can´t be B, because when you configure the port in access mode it doesn´t evaluate the trunking commands, and access only permits one vlan. If you have access on one side the vlan comes untagged, for the other side to put this untagged vlan in a native vlan the port needs to be configured as trunk. Also this imposes that in the future to have vlan 10 passing here you would need to replace SW1 to have trunk funcionality or alternatively configure another uplink to pass vlan 10 the same way to new SW.

   Source: Adapted from community discussion — andresfjardim

   Next question

6. Question 586 · 1334 in bank

   Which WLC interface provides out-of-band management in the Cisco Unified Wireless Network Architecture?

   • AAP-Manager
   • Bservice port
   • Cdynamic
   • Dvirtual

   Show answer

   Answer: B

   Explanation

   The service port is used for out-of-band management of the controller and system recovery and maintenance in the event of a network failure. It is important to note that the service port does not support VLAN trunking or VLAN tagging and is therefore required to connect to an access port on the switch. It is also recommended not to connect the service port to the same VLAN as the wired clients network because by doing so, administrators will not be able to access the management interface (analysed later) of the controller.

   Source: Adapted from community discussion — [Removed]

   Next question

7. Question 587 · 1334 in bank

   

   Refer to the exhibit. The network engineer is configuring a new WLAN and is told to use a setup password for authentication instead of the RADIUS servers. Which additional set of tasks must the engineer perform to complete the configuration?

   • ADisable PMF Enable PSK Enable 802.1x
   • BSelect WPA Policy Enable CCKM Enable PSK
   • CSelect WPA Policy Select WPA2 Policy Enable FT PSK
   • DSelect WPA2 Policy Disable PMF Enable PSK

   Show answer

   Answer: D

   Explanation

   The correct option for this scenario would be D. Select WPA2 Policy Disable PMF Enable PSK. When configuring a WLAN to use a setup password for authentication instead of RADIUS servers, the following tasks must be performed: Select WPA2 Policy: The engineer should select WPA2 (Wi-Fi Protected Access II) as the security policy for the WLAN. WPA2 is a widely used security protocol that provides strong encryption and authentication for wireless networks. Disable PMF: PMF (Protected Management Frames) is a security feature that helps protect against certain types of attacks on wireless networks. However, it may cause compatibility issues with some client devices. Therefore, it should be disabled when using a setup password for authentication. Enable PSK: PSK (Pre-Shared Key) is a form of authentication that uses a shared password or passphrase to authenticate clients on the wireless network. When using a setup password for authentication, the engineer should enable PSK and set the shared password or passphrase.

   Source: Adapted from community discussion — Ciscoman021

   References

   • cisco.com documentation
   • Cisco documentation

   Next question

8. Question 588 · 1334 in bank

   Which mode must be set for Aps to communicate to a Wireless LAN Controller using the Control and Provisioning of Wireless Access Points (CAPWAP) protocol?

   • Aroute
   • Bbridge
   • Clightweight
   • Dautonomous

   Show answer

   Answer: C

   Explanation

   Not sure what you mean by "local mode", but looks like it is exactly the opposite. Lightweight = dependent from a controller and can not run "locally". While autonomous mode runs "locally" - does not need Wireless LAN Controllers to function.

   Source: Adapted from community discussion — Trevor_VT

   Next question

9. Question 589 · 1334 in bank

   Which switch technology establishes a network connection immediately when it is plugged in?

   • APortFast
   • BBPDU guard
   • CUplinkFast
   • DBackboneFast

   Show answer

   Answer: A

   Explanation

   Answer A When you enable PortFast on a switch or trunk port, the port is immediately transitioned to the spanning tree forwarding state. https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst4000/8-2glx/configuration/guide/stp_enha.html

   Source: Adapted from community discussion — Goh0503

   References

   • Cisco documentation
   • Cisco documentation

   Next question

10. Question 590 · 1334 in bank

    Which command on a port enters the forwarding state immediately when a PC is connected to it?

    • Aswitch(config)#spanning-tree portfast default
    • Bswitch(config)#spanning-tree portfast bpduguard default
    • Cswitch(config-if)#spanning-tree portfast trunk
    • Dswitch(config-if)#no spanning-tree portfast

    Show answer

    Answer: A

    Explanation

    int g0/2 spanning-tree portfast. You can also enable portfast with the following command: SW1(config)# spanning-tree portfast default (this enables portfast on all access ports (not trunk ports).

    Source: Adapted from community discussion — Customexit

    References

    • Cisco documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

200-301 practice, question 581. 1334 questions available.