[Feb 25, 2024] Fully Updated CCNA (200-301) Certification Sample Questions
Latest Cisco 200-301 Real Exam Dumps PDF
Cisco 200-301 certification exam is offered in multiple languages and is available worldwide. It is a computer-based exam that consists of multiple-choice questions and simulates real-world scenarios. 200-301 exam duration is 120 minutes, and the passing score is 825 out of 1000. 200-301 exam fee varies depending on the candidate's location and currency, and it is subject to change.
To prepare for the Cisco 200-301 exam, candidates should have a solid understanding of networking basics, including subnetting, IP addressing, and routing protocols. They should also be familiar with Cisco networking technologies and have experience configuring and managing Cisco devices. Candidates can find study materials and practice exams online or attend training courses offered by Cisco or third-party providers. Passing the Cisco 200-301 exam is a significant achievement that demonstrates a candidate's knowledge and skills in the field of networking and opens up new opportunities for career growth and advancement.
NEW QUESTION # 398 
Refer to the exhibit. How does router R1 handle traffic to 192.168.10.16?
- A. It selects the EIGRP route because it has the lowest administrative distance.
- B. It selects the IS-IS route because it has the shortest prefix inclusive of the destination address.
- C. It selects the OSPF route because it has the lowest cost.
- D. It selects the RIP route because it has the longest prefix inclusive of the destination address.
Answer: A
NEW QUESTION # 399
Refer to the exhibit.
Which two commands were used to create port channel 10? (Choose two )
- A. Option D
- B. Option B
- C. Option E
- D. Option C
- E. Option A
Answer: D,E
NEW QUESTION # 400
Refer to the exhibit. A network associate has configured OSPF with the command:
City(config-router)# network 192.168.12.64 0.0.0.63 area 0
After completing the configuration, the associate discovers that not all the interfaces are participating in OSPF.
Which three of the interfaces shown in the exhibit will participate in OSPF according to this configuration statement? (Choose three.)
- A. Serial0/0
- B. Serial0/1.103
- C. FastEthernet0 /1
- D. FastEthernet0 /0
- E. Serial0/1.102
- F. Serial0/1.104
Answer: A,C,E
Explanation:
Section: IP Connectivity
Explanation:
The "network 192.168.12.64 0.0.0.63 equals to network 192.168.12.64/26. This network has:
* Increment: 64 (/26= 1111 1111.1111 1111.1111 1111.1100 0000) + Network address:
192.168.12.64
* Broadcast address: 192.168.12.127
Therefore all interface in the range of this network will join OSPF.
NEW QUESTION # 401
Refer to the exhibit.
An engineer is asked to insert the new VLAN into the existing trunk without modifying anything previously configured Which command accomplishes this task?
- A. switchport trunk allowed vlan 100-104
- B. switchport trunk allowed vlan add 104
- C. switchport trunk allowed vlan all
- D. switchport trunk allowed vlan 104
Answer: D
NEW QUESTION # 402
Refer to the exhibit An IPv6 address must be obtained automatically on the LAN interface on R1 Which command must be implemented to accomplish the task?
- A. Ipv6 address fe80::/10
- B. Ipv6 address 2001:dbB:d8d2:1008:4343:61:0010::/64
- C. Ipv6 address dhcp
- D. Ipv6 address autoconfig
Answer: D
NEW QUESTION # 403
Refer to the exhibit. An engineer configured NAT translations and has verified that the configuration is correct.
Which IP address is the source IP?
- A. 10.4.4.4
- B. 172.23.103.10
- C. 10.4.4.5
- D. 172.23.104.4
Answer: A
Explanation:
The source IP address is the IP address of the sending packets so it is the "inside local" address.
NEW QUESTION # 404
Refer to the exhibit.
Based on the LACP neighbor status, in which mode is the SW1 port channel configured?
- A. active
- B. mode on
- C. auto
- D. passive
Answer: D
NEW QUESTION # 405
Drag and drop the characteristic from the left onto the IPv6 address type on the right.
Answer:
Explanation:
NEW QUESTION # 406
Which WAN access technology is preferred for a small office / home office architecture?
- A. dedicated point-to-point leased line
- B. Integrated Services Digital Network switching.
- C. broadband cable access
- D. frame-relay packet switching
Answer: C
NEW QUESTION # 407
Refer to Exhibit.
Which action do the switches take on the trunk link?
- A. The trunk forms but the mismatched native VLANs are merged into a single broadcast domain.
- B. The trunk forms but VLAN 99 and VLAN 999 are in a shutdown state.
- C. The trunk does not form, but VLAN 99 and VLAN 999 are allowed to traverse the link.
- D. The trunk does not form and the ports go into an err-disabled status.
Answer: A
Explanation:
Explanation
The trunk still forms with mismatched native VLANs and the traffic can actually flow between mismatched switches. But it is absolutely necessary that the native VLANs on both ends of a trunk link match; otherwise a native VLAN mismatch occurs, causing the two VLANs to effectively merge.
For example with the above configuration, SW1 would send untagged frames for VLAN 999. SW2 receives them but would think they are for VLAN 99 so we can say these two VLANs are merged.
NEW QUESTION # 408
Refer to the exhibit.
What is the effect of this configuration?
- A. The switch port remains down until it is configured to trust or untrust incoming packets
- B. Dynamic ARP inspection is disabled because the ARP ACL is missing
- C. The switch port remains administratively down until the interface is connected to another switch
- D. The switch port interface trust state becomes untrusted
Answer: D
NEW QUESTION # 409
Refer to the exhibit.
How does the router manage traffic to 192.168.12.16?
- A. It chooses the EIGRP route because it has the lowest administrative distance
- B. It chooses the OSPF route because it has the longest prefix inclusive of the destination address.
- C. it load-balances traffic between all three routes
- D. It selects the RIP route because it has the longest prefix inclusive of the destination address.
Answer: D
NEW QUESTION # 410
Refer to the exhibit.
What does router R1 use as its OSPF router-ID?
- A. 10.10.1.10
- B. 192.168.0.1
- C. 172.16.15.10
- D. 10.10.10.20
Answer: C
Explanation:
OSPF uses the following criteria to select the router ID: 1. Manual configuration of the router ID (via the "router-id x.x.x.x" command under OSPF router configuration mode). 2. Highest IP address on a loopback interface. 3. Highest IP address on a non-loopback and active (no shutdown) interface.
NEW QUESTION # 411
Drag and drop the elements of a security program from the left onto the corresponding descriptions on the right
Answer:
Explanation:
NEW QUESTION # 412
Refer to the exhibit. Which route does R1 select for traffic that is destined to 192 168.16.2?
- A. 192.168.16.0/27
- B. 192.168.16.0/24
- C. 192.168.16.0/21
- D. 192.168 26.0/26
Answer: A
Explanation:
The destination IP addresses match all four entries in the routing table but the 192.168.16.0/27 has the longest prefix so it will be chosen. This is called the "longest prefix match" rule.
NEW QUESTION # 413
Drag and drop the threat-mitigation techniques from the left onto the types of threat or attack they mitigate on the right.
Answer:
Explanation:
Explanation
Double-Tagging attack:In this attack, the attacking computer generates frames with two 802.1Q tags. The first tag matches the native VLAN of the trunk port (VLAN 10 in this case), and the second matches the VLAN of a host it wants to attack (VLAN 20).When the packet from the attacker reaches Switch A, Switch A only sees the first VLAN 10 and it matches with its native VLAN 10 so this VLAN tag is removed. Switch A forwards the frame out all links with the same native VLAN 10. Switch B receives the frame with an tag of VLAN 20 so it removes this tag and forwards out to the Victim computer.Note: This attack only works if the trunk (between two switches) has the same native VLAN as the attacker.To mitigate this type of attack, you can use VLAN access control lists (VACLs, which applies to all traffic within a VLAN. We can use VACL to drop attacker traffic to specific victims/servers) or implement Private VLANs.ARP attack (like ARP poisoning/spoofing) is a type of attack in which a malicious actor sends falsified ARP messages over a local area network as ARP allows a gratuitous reply from a host even if an ARP request was not received. This results in the linking of an attacker's MAC address with the IP address of a legitimate computer or server on the network. This is an attack based on ARP which is at Layer 2.Dynamic ARP inspection (DAI) is a security feature that validates ARP packets in a network which can be used to mitigate this type of attack.
NEW QUESTION # 414
Router A learns the same route from two different neighbors; one of the neighbor routers is an OSPF neighbor, and the other is an EIGRP neighbor.
What is the administrative distance of the route that will be installed in the routing table?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: B
Explanation:
Section: IP Connectivity
NEW QUESTION # 415
Drag and drop the Rapid PVST+ forwarding slate actions from the loft to the right. Not all actions are used.
Answer:
Explanation:
NEW QUESTION # 416
which two facts must you table into account when you deploy PPPoE? (choose two)
- A. DDR is not supported
- B. DDR idle timers must be configured to support VPDN logging
- C. PPPoE supports a maximum of 10 clients per customer premises equipment
- D. An individual PVC can support one PPPoE client
- E. You must manually configure IP addresses on the PPPoE interface
Answer: B,C
NEW QUESTION # 417
Refer to the exhibit. How will switch SW2 handle traffic from VLAN 10 on SW1?
- A. It sends the traffic to VLAN 1.
- B. It sends the traffic to VLAN 10.
- C. It sends the traffic to VLAN 100.
- D. It drops the traffic.
Answer: C
Explanation:
Since SW-1 is configured native VLAN is VLAN10, so traffic coming out of VLAN-10 is untagged, & goes directly to SW-2 Native VLAN: VLAN100, due to VLAN mismatch.
NEW QUESTION # 418
An engineer must configure a WLAN using the strongest encryption type for WPA2- PSK. Which cipher fulfills the configuration requirement?
- A. AES
- B. WEP
- C. RC4
- D. TKIP
Many routers provide WPA2-PSK (TKIP), WPA2-PSK (AES), and WPA2-PSK (TKIP/AES) as options. TKIP is actually an older encryption protocol introduced with WPA to replace the very-insecure WEP encryption at the time. TKIP is actually quite similar to WEP encryption. TKIP is no longer considered secure, and is now deprecated. In other words, you shouldn't be using it.
AES is a more secure encryption protocol introduced with WPA2 and it is currently the strongest encryption type for WPA2-PSK.
Answer: A
NEW QUESTION # 419
A user configured OSPF in a single area between two routers A serial interface connecting R1 and R2 is running encapsulation PPP By default which OSPF network type is seen on this interface when the user types show ip ospf interface on R1 or R2?
- A. point-to-point
- B. broadcast
- C. nonbroadcast
- D. port-to-multipoint
Answer: A
Explanation:
The default OSPF network type for HDLC and PPP on Serial link is point-to-point (while the default OSPF network type for Ethernet link is Broadcast).
NEW QUESTION # 420
Drag and drop the SNMP manager and agent identifier commands from the left onto the functions on the right
Answer:
Explanation:
NEW QUESTION # 421
Refer to the exhibit.
When PC-A sends traffic to PC-B, which network component is in charge of receiving the packet from PC-A verifying the IP addresses, and forwarding the packet to PC-B?
- A. Router
- B. Layer 2 switch
- C. Load balancer
- D. firewall
Answer: A
NEW QUESTION # 422
Refer to the exhibit.
Which configuration on RTR-1 denies SSH access from PC-1 to any RTR-1 interface and allows all other traffic?
- A. access-list 100 deny tcp host 172.16.1.33 any eq 23 access-list 100 permit ip any any interface GigabitEthernet0/0 ip access-group 100 in
- B. access-list 100 deny tcp host 172.16.1.33 any eq 22 access-list 100 permit ip any any interface GigabitEthernet0/0 ip access-group 100 in
- C. access-list 100 deny tcp host 172.16.1.33 any eq 23 access-list 100 permit ip any any line vty 0 15 ip access-group 100 in
- D. access-list 100 deny tcp host 172.16.1.33 any eq 22 access-list 100 permit ip any any line vty 0 15 ip access-group 100 in
Answer: D
NEW QUESTION # 423
......
Cisco 200-301 Dumps - Secret To Pass in First Attempt: https://www.pass4guide.com/200-301-exam-guide-torrent.html
200-301 Practice Test Questions Updated 920 Questions: https://drive.google.com/open?id=13ILrTX_MQ4QgDm9XXFJ95dIiDKWwgW67