200-301 practice questions 861–870

1. Question 861 · 1334 in bank

   On workstations running Microsoft Windows, which protocol provides the default gateway for the device?

   • ASTP
   • BDHCP
   • CSNMP
   • DDNS

   Show answer

   Answer: B

   Next question

2. Question 862 · 1334 in bank

   Select 2

   Which two statements about NTP operations are true? (Choose two.)

   • ANTP uses UDP over IP.
   • BCisco routers can act as both NTP authoritative servers and NTP clients.
   • CCisco routers can act only as NTP servers.
   • DCisco routers can act only as NTP clients.
   • ENTP uses TCP over IP.

   Show answer

   Answer: AB

   Next question

3. Question 863 · 1334 in bank

   

   Refer to the exhibit. Which configuration must be applied to the router that configures PAT to translate all addresses in VLAN 200 while allowing devices on VLAN 100 to use their own IP addresses?

   • ARouter1(config)#access-list 99 permit 192.168.100.32 0.0.0.31 Router1(config)#ip nat inside source list 99 interface gi1/0/0 overload Router1(config)#interface gi2/0/1.200 Router1(config)#ip nat inside Router1(config)#interface gi1/0/0 Router1(config)#ip nat outside
   • BRouter1(config)#access-list 99 permit 192.168.100.0 0.0.0.255 Router1(config)#ip nat inside source list 99 interface gi1/0/0 overload Router1(config)#interface gi2/0/1.200 Router1(config)#ip nat inside Router1(config)#interface gi1/0/0 Router1(config)#ip nat outside
   • CRouter1(config)#access-list 99 permit 209.165.201.2 255.255.255.255 Router1(config)#ip nat inside source list 99 interface gi1/0/0 overload Router1(config)#interface gi2/0/1.200 Router1(config)#ip nat inside Router1(config)#interface gi1/0/0 Router1(config)#ip nat outside
   • DRouter1(config)#access- list 99 permit 209.165.201.2 0.0.0.0 Router1(config)#ip nat inside source list 99 interface gi1/0/0 overload Router1(config)#interface gi2/0/1.200 Router1(config)#ip nat inside Router1(config)#interface gi1/0/0 Router1(config)#ip nat outside

   Show answer

   Answer: A

   Explanation

   This config is so broke it hurts my head, OR multiple clients from vlan 200 will be able to send traffic outside, OR 1 client from vlan 100. Either way there will be clients with outside connectivity issues.

   Source: Adapted from community discussion — splashy

   Next question

4. Question 864 · 1334 in bank

   Select 2

   

   Refer to the exhibit. Which two commands must be added to update the configuration of router R1 so that it accepts only encrypted connections? (Choose two.)

   • Atransport input ssh
   • Busername CNAC secret R!41!3705926@
   • Ccrypto key generate rsa 1024
   • Dline vty 0 4
   • Eip ssh version 2

   Show answer

   Answer: AC

   Explanation

   The default setting on switch/router to accept remote access is telnet. Crypto key is not yet generated. "...configuration of router R1 so that it accepts ONLY encrypted connections..." So A + C

   Source: Adapted from community discussion — splashy

   References

   • Cisco documentation
   • Cisco documentation

   Next question

5. Question 865 · 1334 in bank

   Which command implies the use of SNMPv3?

   • Asnmp-server user
   • Bsnmp-server host
   • Csnmp-server enable traps
   • Dsnmp-server community

   Show answer

   Answer: A

   Explanation

   Adds a new user to an SNMPv3 group and configures a plain text password for the user. Example: Device(config)# snmp-server user user1 group1 v3 auth md5 password123 priv passwd123654

   Source: Adapted from community discussion — ptfish

   References

   • Cisco documentation

   Next question

6. Question 866 · 1334 in bank

   R1 as an NTP server must have: ✑ NTP authentication enabled ✑ NTP packets sourced from Interface loopback 0 ✑ NTP stratum 2 ✑ NTP packets only permitted to client IP 209.165.200.225 How should R1 be configured?

   • Antp authenticate ntp authentication-key 2 sha1 CISCO123 ntp source Loopback0 ntp access-group server-only 10 ntp master 2 ! access-list 10 permit udp host 209.165.200.225 any eq 123
   • Bntp authenticate ntp authentication-key 2 md5 CISCO123 ntp interface Loopback0 ntp access-group server-only 10 ntp stratum 2 ! access-list 10 permit 209.165.200.225
   • Cntp authenticate ntp authentication-key 2 md5 CISCO123 ntp source Loopback0 ntp access-group server-only 10 ntp master 2 ! access-list 10 permit 209.165.200.225
   • Dntp authenticate ntp authentication-key 2 md5 CISCO123 ntp source Loopback0 ntp access-group server-only 10 ntp stratum 2 ! access-list 10 permit udp host 209.165.200.225 any eq 123

   Show answer

   Answer: C

   Explanation

   C seems correct, its an acl question. 10 is standard acl number so A and D are wrong cause they are extended acls. NTP Master 2 makes the router an ntp server with stratum lvl 2.

   Source: Adapted from community discussion — splashy

   References

   • Cisco documentation
   • Cisco documentation

   Next question

7. Question 867 · 1334 in bank

   What is a capability of FTP in network management operations?

   • Aoffers proprietary support at the session layer when transferring data
   • Buses separate control and data connections to move files between server and client
   • Cencrypts data before sending between data resources
   • Ddevices are directly connected and use UDP to pass file information

   Show answer

   Answer: B

   Explanation

   A. FTP operates at the application layer, not the session layer. B. FTP uses separate control and data connections to move files between a server and a client. The control connection is used to send commands and receive responses, while the data connection is established separately for the actual file transfer. C. FTP itself does not provide native encryption; however, FTPS (FTP Secure) and SFTP (SSH File Transfer Protocol) are secure alternatives that offer encryption. D. FTP use TCP.

   Source: Adapted from community discussion — ricky1802

   Next question

8. Question 868 · 1334 in bank

   Select 2

   Which two goals reasons to implement private IPv4 addressing on your network? (Choose two.)

   • AComply with PCI regulations
   • BConserve IPv4 address
   • CReduce the size of the forwarding table on network routers
   • DReduce the risk of a network security breach
   • EComply with local law

   Show answer

   Answer: BD

   Explanation

   I think the answer B should be more specific like "To conserve IPv4 Public Addresses" - otherwise you cant conserve IPv4 addresses by using IPv4 addresses.

   Source: Adapted from community discussion — CiscoTerminator

   Next question

9. Question 869 · 1334 in bank

   A network engineer is configuring a switch so that it is remotely reachable via SSH. The engineer has already configured the host name on the router. Which additional command must the engineer configure before entering the command to generate the RSA key?

   • Apassword password
   • Bip ssh authentication-retries 2
   • Cip domain-name domain
   • Dcrypto key generate rsa modulus 1024

   Show answer

   Answer: C

   Next question

10. Question 870 · 1334 in bank

    Which QoS traffic handling technique retains excess packets in a queue and reschedules these packets for later transmission when the configured maximum bandwidth has been surpassed?

    • Atraffic policing
    • Bweighted random early detection
    • Ctraffic prioritization
    • Dtraffic shaping

    Show answer

    Answer: D

    Explanation

    Policing drops or remarks traffic that exceeds limits, but shaping regulates the traffic back to a defined rate by delaying or queuing the traffic.

    Source: Adapted from community discussion — Networknovice

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

200-301 practice, question 861. 1334 questions available.