200-301 practice questions 971–980

1. Question 971 · 1334 in bank

   DRAG DROP - An engineer is tasked to configure a switch with port security to ensure devices that forward unicasts, multicasts, and broadcasts are unable to flood the port. The port must be configured to permit only two random MAC addresses at a time. Drag and drop the required configuration commands from the left onto the sequence on the right. Not all commands are used. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   It says: only two random MAC addresses at a time, not the first two macs. So the sticky command is incorrect, as are the static MACs, leaving only 4 options

   Source: Adapted from community discussion — HeinyHo

   References

   • cisco.com documentation

   

   Next question

2. Question 972 · 1334 in bank

   What is a function of Opportunistic Wireless Encryption in an environment?

   • Aprovide authentication
   • Bprotect traffic on open networks
   • Coffer compression
   • Dincrease security by using a WEP connection

   Show answer

   Answer: B

   Explanation

   B. Protect traffic on open networks. The function of Opportunistic Wireless Encryption (OWE) in an environment is to protect traffic on open networks. Open networks, such as public Wi-Fi hotspots, do not typically have encryption enabled by default, making them vulnerable to eavesdropping and data interception. OWE provides a mechanism to encrypt wireless communication on these open networks, adding a layer of security to protect the transmitted data. It helps ensure the confidentiality and integrity of the network traffic, even in the absence of a pre-shared key or a separate authentication mechanism.

   Source: Adapted from community discussion — StingVN

   Next question

3. Question 973 · 1334 in bank

   DRAG DROP - Drag and drop the AAA features from the left onto the corresponding AAA security services on the right. Not all options are used. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   I think the RADIUS options refers more to Authentication. Please correct me if im wrong, but i think that in Authorization the RADIUS option is incorrect, and instead it should be "Enables the device for user or group based access".

   Source: Adapted from community discussion — EliasM

   References

   • cisco.com documentation
   • cisco.com documentation
   • Cisco documentation

   

   Next question

4. Question 974 · 1334 in bank

   

   Refer to the exhibit. Clients on the WLAN are required to use 802.11r. What action must be taken to meet the requirement?

   • AUnder Protected Management Frames, set the PMF option to Required.
   • BEnable CCKM under Authentication Key Management.
   • CSet the Fast Transition option and the WPA gtk-randomize State to disable.
   • DSet the Fast Transition option to Enable and enable FT 802.1X under Authentication Key Management.

   Show answer

   Answer: D

   References

   • Cisco documentation
   • cisco.com documentation

   Next question

5. Question 975 · 1334 in bank

   

   Refer to the exhibit. What must be configured to enable 802.11w on the WLAN?

   • ASet Fast Transition to Enabled.
   • BEnable WPA Policy.
   • CSet PMF to Required.
   • DEnable MAC Filtering.

   Show answer

   Answer: C

   Explanation

   IEEE 802.11w is an amendment to the IEEE 802.11 standard that defines enhancements to the security of wireless local area networks (WLANs). It specifies the use of Protected Management Frames (PMFs), which provide an additional layer of security for management frames that are used to control the operation of a WLAN. This includes management frames such as Beacon frames, which are used to advertise the presence of a WLAN, and Association Request frames, which are used to initiate the connection process between a client device and an access point. 802.11w aims to prevent certain types of attacks, such as man-in-the-middle attacks, which can be used to intercept and modify management frames in order to disrupt the operation of a WLAN.

   Source: Adapted from community discussion — Phonon

   References

   • Cisco documentation
   • Cisco documentation
   • Cisco documentation

   Next question

6. Question 976 · 1334 in bank

   Select 2

   Which two functions are performed by the core layer in a three-tier architecture? (Choose two.)

   • AProvide uninterrupted forwarding service
   • BInspect packets for malicious activity
   • CEnsure timely data transfer between layers
   • DProvide direct connectivity for end user devices
   • EPolice traffic that is sent to the edge of the network

   Show answer

   Answer: AC

   Explanation

   In a three-tier architecture, the core layer is the central part of the network that provides high-speed switching and routing services to other network segments. The core layer is responsible for forwarding data between distribution layers and other network segments, and for ensuring efficient and reliable data transmission. The core layer is designed to be highly available, scalable, and redundant, and typically uses high-speed network switches and routers. The core layer provides the backbone for the network, and is critical to the overall performance and reliability of the system. It is usually placed at the center of the network, and is optimized for speed and low latency to provide high-speed connectivity between the distribution layers. The core layer also provides a centralized point for network management and monitoring.

   Source: Adapted from community discussion — ricky1802

   Next question

7. Question 977 · 1334 in bank

   Which encryption method is used by WPA3?

   • ATKIP
   • BAES
   • CSAE
   • DPSK

   Show answer

   Answer: B

   Explanation

   B. AES WPA3 (Wi-Fi Protected Access 3) primarily uses the Advanced Encryption Standard (AES) encryption method. AES is a strong and widely adopted encryption algorithm that provides secure and robust encryption for wireless communication. WPA3 improves the security of Wi-Fi networks by incorporating stronger encryption protocols, and AES is the recommended encryption algorithm for ensuring data confidentiality in WPA3. TKIP (Temporal Key Integrity Protocol) was used in the earlier WPA and WPA2 security standards but is not used in WPA3 due to its known security vulnerabilities. SAE (Simultaneous Authentication of Equals) is the authentication method used in WPA3-Personal (WPA3-PKS) mode, but it is not the encryption method. PSK (Pre-Shared Key) refers to a method of authentication rather than encryption and is commonly used in WPA2-Personal mode.

   Source: Adapted from community discussion — StingVN

   References

   • Cisco documentation
   • Cisco documentation

   Next question

8. Question 978 · 1334 in bank

   Which type of traffic is sent with pure IPsec?

   • Amulticast traffic from a server at one site to hosts at another location
   • Bbroadcast packets from a switch that is attempting to locate a MAC address at one of several remote sites
   • Cunicast messages from a host at a remote site to a server at headquarters
   • Dspanning-tree updates between switches that are at two different sites

   Show answer

   Answer: C

   Explanation

   C. Unicast messages from a host at a remote site to a server at headquarters. Pure IPsec is typically used to secure unicast traffic between two endpoints. Unicast traffic refers to one-to-one communication between a specific sender and receiver. In this case, it would involve unicast messages from a host at a remote site to a server at headquarters. IPsec is a protocol suite used to provide secure communication over IP networks. It can be used to encrypt and authenticate IP packets, ensuring the confidentiality, integrity, and authenticity of the transmitted data. While IPsec can also support multicast and broadcast traffic, the term "pure IPsec" generally refers to the use of IPsec in a point-to-point unicast communication scenario.

   Source: Adapted from community discussion — StingVN

   Next question

9. Question 979 · 1334 in bank

   How does authentication differ from authorization?

   • AAuthentication is used to record what resource a user accesses, and authorization is used to determine what resources a user can access.
   • BAuthentication verifies the identity of a person accessing a network, and authorization determines what resource a user can access.
   • CAuthentication is used to determine what resources a user is allowed to access, and authorization is used to track what equipment is allowed access to the network.
   • DAuthentication is used to verify a person's identity, and authorization is used to create syslog messages for logins.

   Show answer

   Answer: B

   Next question

10. Question 980 · 1334 in bank

    An engineer has configured the domain name, user name, and password on the local router. What is the next step to complete the configuration for a Secure Shell access RSA key?

    • Acrypto key import rsa pem
    • Bcrypto key generate rsa
    • Ccrypto key zeroize rsa
    • Dcrypto key pubkey-chain rsa

    Show answer

    Answer: B

    Explanation

    B. crypto key generate rsa The next step to complete the configuration for a Secure Shell (SSH) access RSA key on the local router is to use the "crypto key generate rsa" command. This command generates an RSA key pair that will be used for SSH encryption and authentication purposes. After running this command, the router will prompt for the key modulus size (usually 1024 or 2048 bits) and will generate the RSA key pair. The generated RSA public key will be used for SSH server authentication, and the private key will be stored on the router for secure SSH communication. Options A, C, and D are not the correct commands for generating an RSA key pair for SSH access on a router.

    Source: Adapted from community discussion — StingVN

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

200-301 practice, question 971. 1334 questions available.