Download 2021 Free Updated CCNA 200-301 Questions and Answers

test2021-10-13T09:25:00+00:00

The CCNA, which stands for Cisco Certified Network Associate, is Cisco’s entry-level networking qualification. CCNA exam covers networking fundamentals, IP services, security fundamentals, automation and programmability. Designed for agility and versatility, CCNA validates that you have the skills required to manage and optimize today’s most advanced networks.

You should validate this knowledge by passing 200-301 exam. If you want to learn how you can ace this test and look for valid exam preparation, then you should read the free CCNA 200-301 questions and answers below.

Page 1 of 12

1. What are two fundamentals of virtualization? (Choose two)

The environment must be configured with one hypervisor that serves solely as a network manager to monitor SNMP traffic

It allows logical network devices to move traffic between virtual machines and the rest of the physical network

It allows multiple operating systems and applications to run independently on one physical server

It allows a physical router to directly connect NICs from each virtual machine into the network

It requires that some servers, virtual machines and network gear reside on the Internet

2. A network engineer must create a diagram of a multivendor network.

Which command must be configured on the Cisco devices so that the topology of the network can be mapped?

Device(Config)#lldp run

Device(Config)#cdp run

Device(Config-if)#cdp enable

Device(Config)#flow-sampler-map topology

3. What is a function of TFTP in network operations?

transfers a configuration files from a server to a router on a congested link

transfers IOS images from a server to a router for firmware upgrades

transfers a backup configuration file from a server to a switch using a username and password

transfers files between file systems on a router

4. A network administrator is asked to configure VLANs 2, 3 and 4 for a new implementation. Some ports must be assigned to the new VLANs with unused remaining.

Which action should be taken for the unused ports?

configure port in the native VLAN

configure ports in a black hole VLAN

configure in a nondefault native VLAN

configure ports as access ports

5. R1 has learned route 192.168.12.0/24 via IS-IS, OSPF, RIP and Internal EIGRP.

Under normal operating conditions, which routing protocol is installed in the routing table?

IS-IS

RIP

Internal EIGRP

OSPF

6. Which option best describes an API?

communication often uses either Java scripting, Python, XML, or simple HTTP

an architectural style (versus a protocol) for designing applications

a stateless client-server model

request a certain type of data by specifying the URL path that models the data

7. Which command verifies whether any IPv6 ACLs are configured on a router?

show ipv6 interface

show access-list

show ipv6 access-list

show ipv6 route

8. While examining excessive traffic on the network, it is noted that all incoming packets on an interface appear to be allowed even though an IPv4 ACL is applied to the interface.

Which two misconfigurations cause this behavior? (Choose two)

The packets fail to match any permit statement

A matching permit statement is too high in the access list

A matching permit statement is too broadly defined

The ACL is empty

A matching deny statement is too high in the access list

9. An engineer is configuring NAT to translate the source subnet of 10.10.0.0/24 to any of three addresses 192.168.3.1, 192.168.3.2, 192.168.3.3.

Which configuration should be used?

Option A

Option B

Option C

10. Refer to the exhibit.

Which action is taken by the router when a packet is sourced from 10.10.10.2 and destined for 10.10.10.16?

It discards the packets

It uses a route that is similar to the destination address

It floods packets to all learned next hops

It queues the packets waiting for the route to be learned

Page 2 of 12

11. What are two differences between optical-fiber cabling and copper cabling? (Choose two)

Light is transmitted through the core of the fiber

A BNC connector is used for fiber connections

The glass core component is encased in a cladding

Fiber connects to physical interfaces using RJ-45 connections

The data can pass through the cladding

12. Drag and drop the SNMP components from the left onto the descriptions on the right.

13. Anycompany has decided to reduce its environmental footprint by reducing energy costs, moving to a smaller facility, and promoting telecommuting.

What service or technology would support this requirement?

Cisco ACI

cloud services

APIC-EM

data center

14. When a WLAN with WPA2 PSK is configured in the Wireless LAN Controller GUI which format is supported?

Unicode

base64

ASCII

decimal

15. Which Cisco IOS command will indicate that interface GigabitEthernet 0/0 is configured via DHCP?

show ip interface GigabitEthernet 0/0 dhcp

show interface GigabitEthernet 0/0

show ip interface dhcp

show ip interface GigabitEthernet 0/0

show ip interface GigabitEthernet 0/0 brief

16. How does WPA3 improve security?

It uses SAE for authentication.

It uses a 4-way handshake for authentication.

It uses RC4 for encryption.

It uses TKIP for encryption.

17. Refer to the exhibit.

An administrator must turn off the Cisco Discovery Protocol on the port configured with last usable address in the 10.0.0.0/30 subnet.

Which command set meets the requirement?

interface gi0/1 no cdp enable

interface gi0/1 clear cdp table

interface gi0/0 no cdp run

interface gi0/0 no cdp advertise-v2

18. How does a router behave when configured with the default DNS lookup settings, and a URL is entered on the CLI?

prompts the user to specify the desired IP address.

initiates a ping request to the UR

continuously attempts to resolve the URL until the command is cancelled.

attempts to query a DNS server on the network.

19. Refer to the exhibit.

Which configuration issue is preventing the OSPF neighbor relationship from being established between the two routers?

R2 is using the passive-interface default command

R1 has an incorrect network command for interface Gi1/0

R2 should have its network command in area 1

R1 interface Gi1/0 has a larger MTU size

20. Refer to the exhibit.

A network technician is asked to design a small network with redundancy. The exhibit represents this design, with all hosts configured in the same VLAN.

What conclusions can be made about this design?

The design will function as intended

Spanning-tree will need to be used.

The router will not accept the addressing scheme.

The connection between switches should be a trunk.

The router interfaces must be encapsulated with the 802.1Q protocol.

Page 3 of 12

21. Refer to the exhibit.

When PC-A sends traffic to PC-B, which network component is in charge of receiving the packet from PC-A verifying the IP addresses, and forwarding the packet to PC-B?

Layer 2 switch

firewall

Load balancer

Router

22. The SW1 interface g0/1 is in the down/down state.

Which two configurations are valid reasons for the interface conditions? (Choose two)

There is a duplex mismatch

There is a speed mismatch

There is a protocol mismatch

The interface is shut down

The interface is error-disabled

23. Refer to the exhibit.

Which command must be executed for Gi1/1 on SW1 to become a trunk port if Gi1/1 on SW2 is configured in desirable or trunk mode?

switchport mode trunk

switchport mode dot1-tunnel

switchport mode dynamic auto

switchport mode dynamic desirable

24. Which function is performed by DHCP snooping?

rate-limits certain traffic

listens to multicast traffic for packet forwarding

provides DDoS mitigation

propagates VLAN information between switches

25. Refer to the exhibit.

How does router R1 handle traffic to 192.168.12.16?

It selects the IS-IS route because it has the shortest prefix inclusive of the destination address

It selects the EIGRP route because it has the lowest administrative distance

It selects the OSPF route because it has the lowest cost

It selects the RIP route because it has the longest prefix inclusive of the destination address

26. When configuring IPv6 on an interface, which two IPv6 multicast groups are joined? (Choose two)

2000::/3

2002::5

FC00::/7

FF02::1

FF02::2

27. What is the function of a controller in controller-based networking?

It is a pair of core routers that maintain all routing decisions for a campus

It centralizes the data plane for the network

It is the card on a core router that maintains all routing decisions for a campus

It serves as the centralized management point of an SDN architecture

28. Refer to the exhibit.

IBGP route 10.0.0.0/30

RIP route 10.0.0.0/30

OSPF route 10.0.0.0/16

OSPF route 10.0.0.0/30

EIGRP route 10.0.0.1/32

A router reserved these five routes from different routing information sources.

Which two routes does the router install in its routing table? (Choose two)

RIP route 10.0.0.0/30

iBGP route 10.0.0.0/30

OSPF route 10.0.0.0/30

EIGRP route 10.0.0.1/32

OSPF route 10.0.0.0/16

29. Drag and drop to the characteristics of networking from the left onto the correct networking types on the right.

30. Which port type supports the spanning-tree portfast command without additional configuration?

access ports

Layer 3 main interfaces

Layer 3 subinterfaces

trunk ports

Page 4 of 12

31. Refer to the exhibit.

What does router R1 use as its OSPF router-ID?

10.10.1.10

10.10.10.20

172.16.15.10

192.168.0.1

32. On workstations running Microsoft Windows, which protocol provides the default gateway for the device?

STP

DNS

SNMP

DHCP

33. Refer to the exhibit.

An engineer must configure GigabitEthernet1/1 to accommodate voice and data traffic.

Which configuration accomplishes this task?

Option A

interface gigabitethernet1/1

switchport mode access

switchport access vlan 300

switchport voice vlan 400

Option B

interface gigabitethernet1/1

switchport mode access

switchport access vlan 400

switchport voice vlan 300

Option C

interface gigabitethernet1/1

switchport mode trunk

switchport access vlan 300

switchport voice vlan 400

Option D

interface gigabitethernet1/1

switchport mode trunk

switchport trunk vlan 300

switchport trunk vlan 400

Option A

Option B

Option C

Option D

34. Which type of address is the public IP address of a NAT device?

outside global

outside local

inside global

inside local

outside public

inside public

35. Refer to the exhibit.

Which password must an engineer use to enter the enable mode?

adminadmin123

default

testing1234

cisco123

36. What is the destination MAC address of a broadcast frame?

00:00:0c:07:ac:01

ff:ff:ff:ff:ff:ff

43:2e:08:00:00:0c

00:00:0c:43:2e:08

00:00:0crfHfrff

37. What is a DHCP client?

a host that is configured to request an IP address automatically

a router that statically assigns IP addresses to hosts

a server that dynamically assigns IP addresses to hosts

a workstation that requests a domain name associated with its IP address

38. Drag the IPv6 DNS record types from the left onto the description on the right.

39. Which configuration ensures that the switch is always the root for VLAN 750?

Switch(config)#spanning-tree vlan 750 priority 0

Switch(config)#spanning-tree vlan 750 priority 614440

Switch(config)#spanning-tree vlan 750 priority 38003685

Switch(config)#spanning-tree vlan 750 root primary

40. A packet is destined for 10.10.1.22.

Which static route does the router choose to forward the packet?

ip route 10.10.1.0 255.255.255.240 10.10.255.1

ip route 10.10.1.16 255.255.255.252 10.10.255.1

ip route 10.10.1.20 255.255.255.252 10.10.255.1

ip route 10.10.1.20 255.255.255.254 10.10.255.1

Page 5 of 12

41. Which two components are needed to create an Ansible script that configures a VLAN on a switch? (Choose two)

task

cookbook

recipe

model

playbook

42. A network administrator must to configure SSH for remote access to router R1. The requirement is to use a public and private key pair to encrypt management traffic to and from the connecting client.

Which configuration, when applied, meets the requirements?

A ) R1#enable

R1#configure terminal

R1(config)#ip domain-name cisco.com

R1(config)#crypto key generate ec keysize 1024

B) R1#enable

R1#configure terminal

R1(config)#ip domain-name cisco.com

R1(config)#crypto key generate rsa modulus 1024

C) R1#enable

R1#configure terminal

R1(config)#ip domain-name cisco.com

R1(config)#crypto key generate ec keysize 2048

D) R1#enable

R1#configure terminal

R1(config)#ip domain-name cisco.com

R1(config)#crypto key encrypt rsa name myKey

Option A

Option B

Option C

Option D

43. What is a syslog facility?

host that is configured for the system to send log messages

password that authenticates a Network Management System to receive log messages

group of log messages associated with the configured severity level

set of values that represent the processes that can generate a log message

44. Several new coverage cells are required to improve the Wi-Fi network of an organization.

Which two standard designs are recommended? (Choose two)

5GHz provides increased network capacity with up to 23 nonoverlapping channels,

5GHz channel selection requires an autonomous access point.

Cells that overlap one another are configured to use nonoverlapping channels.

Adjacent cells with overlapping channels use a repeater access point.

For maximum throughput, the WLC is configured to dynamically set adjacent access points to the same channel.

45. A network engineer must configure the router R1 GigabitEthernet1/1 interface to connect to the router R2 GigabitEthernet1/1 interface. For the configuration to be applied the engineer must compress the address 2001:0db8:0000:0000:0500:000a:400F:583B.

Which command must be issued on the interface?

ipv6 address 2001:db8::500:a:400F:583B

ipv6 address 2001 db8:0::500:a:4F:583B

ipv6 address 2001:0db8::5:a:4F:583B

ipv6 address 2001::db8:0000::500:a:400F:583B

46. What are network endpoints?

a threat to the network if they are compromised

support inter-VLAN connectivity

act as routers to connect a user to the service prowler network

enforce policies for campus-wide traffic going to the internet

47. Which two functions are performed by the core layer in a three-tier architecture? (Choose two)

Provide direct connectivity for end user devices

Police traffic that is sent to the edge of the network

Provide uninterrupted forwarding service

Inspect packets for malicious activity

Ensure timely data transfer between layers

48. Drag and drop each broadcast IP address on the left to the Broadcast Address column on the right.

Not all options are used.

49. Refer to the exhibit.

A network administrator must permit SSH access to remotely manage routers in a network. The operations team resides on the 10.20.1.0/25 network.

Which command will accomplish this task?

access-list 2699 permit udp 10.20.1.0 0.0.0.255

no access-list 2699 deny tcp any 10.20.1.0 0.0.0.127 eq 22

access-list 2699 permit tcp any 10.20.1.0 0.0.0.255 eq 22

no access-list 2699 deny ip any 10.20.1.0 0.0.0.255

50. Which two outcomes are predictable behaviors for HSRP? (Choose two)

The two routers share a virtual IP address that is used as the default gateway for devices on the LAN

The two routers negotiate one router as the active router and the other as the standby router

Each router has a different IP address both routers act as the default gateway on the LAN, and traffic is load balanced between them

The two routers synchronize configurations to provide consistent packet forwarding

The two routed share the same IP address, and default gateway traffic is load-balanced between them

Page 6 of 12

51. Drag the descriptions of device management from the left onto the types of device management on the right.

52. What is the purpose of an SSID?

It provides network security

It differentiates traffic entering access points

It identities an individual access point on a WLAN

It identifies a WLAN

53. Which plane is centralized by an SON controller?

data plane

management plane

control plane

services plane

54. Which resource is able to be shared among virtual machines deployed on the same physical server?

applications

operating system

VM configuration file

disk

55. Drag drop the descriptions from the left on to the correct configuration-management technologies on the right.

56. Which two pieces of information can you determine from the output of the show ntp status command? (Choose two)

whether the NTP peer is statically configured

the IP address of the peer to which the clock is synchronized

the configured NTP servers

whether the clock is synchronized

the NTP version number of the peer

57. Which access layer threat-mitigation technique provides security based on identity?

using a non-default native VLAN

Dynamic ARP Inspection

DHCP snooping

802.1x

58. What is the purpose of traffic shaping?

be a marking mechanism that identifies different flows

to limit the bandwidth that a flow can use to

to provide fair queuing for buffered flows

to mitigate delays over slow links

59. Refer to the exhibit.

Router R2 is configured with multiple routes to reach network 10 1.1 0/24 from router R1.

What protocol is chosen by router R2 to reach the destination network 10.1 1 0/24?

OSPF

static

EIGRP

eBGP

60. Which set of action satisfy the requirement for multi-factor authentication?

The user swipes a key fob, then clicks through an email link

The user enters a user name and password, and then clicks a notification in an authentication app on a mobile device

The user enters a PIN into an RSA token, and then enters the displayed RSA key on a login screen

The user enters a user name and password and then re-enters the credentials on a second screen

Page 7 of 12

61. Refer to the exhibit.

Only four switches are participating in the VLAN spanning-tree process.

Branch-1: priority 614440

Branch-2: priority 39082416

Branch-3: priority 0

Branch-4: root primary

Which switch becomes the permanent root bridge for VLAN 5?

Branch-1

Branch-2

Branch-3

Branch-4

62. Drag and drop the networking parameters from the left on to the correct values on the right.

63. Refer to the exhibit.

A network administrator assumes a task to complete the connectivity between PC A and the File Server. Switch A and Switch B have been partially configured with VLANs 10, 11, 12 and 13.

What is the next step in the configuration?

Add PC A to the same subnet as the File Server allowing for intra-VLAN communication

Add PC A to VLAN 10 and the File Server to VLAN 11 for VLAN segmentation

Add a router on a stick between Switch A and Switch B allowing for inter-VLAN routing

Add VLAN 13 to the trunk links on Switch A and Switch B for VLAN propagation

64. What is a characteristic of a SOHO network?

connects each switch to every other switch in the network

enables multiple users to share a single broadband connection

provides high throughput access for 1000 or more users

includes at least three tiers of devices to provide load balancing and redundancy

65. How is the native VLAN secured in a network?

separate from other VLANs within the administrative domain

give it a value in the private VLAN range

assign it as VLAN 1

configure it as a different VLAN ID on each end of the link

66. In which way does a spine and-leaf architecture allow for scalability in a network when additional access ports are required?

A spine switch and a leaf switch can be added with redundant connections between them

A spine switch can be added with at least 40 GB uplinks

A leaf switch can be added with a single connection to a core spine switch

A leaf switch can be added with connections to every spine switch

67. What does a switch use to build its MAC address table?

VTP

DTP

egress traffic

ingress traffic

68. Which protocol does an access point use to draw power from a connected switch?

Internet Group Management Protocol

Cisco Discovery Protocol

Adaptive Wireless Path Protocol

Neighbor Discovery Protocol

69. An engineer must configure a /30 subnet between two routers.

Which usable IP address and subnet mask combination meets this criteria?

interface e0/0 description to HQ-A371:10975 ip address 172.16.1.4 255.255.255.248

interface e0/0 description to HQ-A371:10975 ip address 10.2.1.3 255.255.255.252

interface e0/0 description to HQ-A371:10975 ip address 192.168.1.1 255.255.255.248

interface e0/0 description to HQ-A371:10975 ip address 209.165.201.2 255.255.255.252

70. A frame that enters a switch fails the Frame Check Sequence.

Which two interface counters are incremented? (Choose two)

runts

giants

frame

CRC

input errors

Page 8 of 12

71. Which two QoS tools provides congestion management? (Choose two)

FRTS

CAR

PBR

CBWFQ

72. An engineer must establish a trunk link between two switches. The neighboring switch is set to trunk or desirable mode.

What action should be taken?

configure switchport nonegotiate

configure switchport mode dynamic desirable

configure switchport mode dynamic auto

configure switchport trunk dynamic desirable

73. Using direct sequence spread spectrum, which three 2.4-GHz channels are used to limit collisions?

1,5,10

1,2,3

1,6,11

5,6,7

74. Refer to the exhibit.

After the switch configuration the ping test fails between PC A and PCB.

Based on the output for switch 1, which error must be corrected?

There is a native VLAN mismatch

Access mode is configured on the switch ports.

The PCs are in the incorrect VLAN

All VLANs are not enabled on the trunk

75. Which three statements about MAC addresses are correct? (Choose three)

To communicate with other devices on a network, a network device must have a unique MAC address

The MAC address is also referred to as the IP address

The MAC address of a device must be configured in the Cisco IOS CLI by a user with administrative privileges

A MAC address contains two main components, the first of which identifies the manufacturer of the hardware and the second of which uniquely identifies the hardware

An example of a MAC address is 0A:26:B8:D6:65:90

A MAC address contains two main components, the first of which identifies the network on which the host resides and the second of which uniquely identifies the host on the network

76. What are two roles of the Dynamic Host Configuration Protocol (DHCP)? (Choose two)

The DHCP server offers the ability to exclude specific IP addresses from a pool of IP addresses

The DHCP client can request up to four DNS server addresses

The DHCP server assigns IP addresses without requiring the client to renew them

The DHCP server leases client IP addresses dynamically

The DHCP client maintains a pool of IP addresses it can assign

77. Refer to the exhibit.

Which two configurations would be used to create and apply a standard access list on R1, so that only the 10.0.70.0/25 network devices are allowed to access the internal database server? (Choose two)

R1(config)# interface GigabitEthernet0/0 R1(config-if)# ip access-group 5 out

R1(config)# access-list 5 permit 10.0.54.0 0.0.1.255

R1(config)# interface Serial0/0/0 R1(config-if)# ip access-group 5 in

R1(config)# access-list 5 permit 10.0.70.0 0.0.0.127

R1(config)# access-list 5 permit any

78. Which action is taken by a switch port enabled for PoE power classification override?

When a powered device begins drawing power from a PoE switch port a syslog message is generated

As power usage on a PoE switch port is checked data flow to the connected device is temporarily paused

If a switch determines that a device is using less than the minimum configured power it assumes the device has failed and disconnects

If a monitored port exceeds the maximum administrative value for power, the port is shutdown and err-disabled

79. Drag and drop the functions from the left onto the correct network components on the right.

80. Which API is used in controller-based architectures to interact with edge devices?

overlay

northbound

underlay

southbound

Page 9 of 12

81. Drag and drop the AAA terms from the left onto the description on the right.

82. Refer to the exhibit.

An engineer deploys a topology in which R1 obtains its IP configuration from DHCP. If the switch and DHCP server configurations are complete and correct.

Which two sets of commands must be configured on R1 and R2 to complete the task? (Choose two)

R1 (config)# interface fa0/0 R1 (config-if)# ip helper-address 198.51.100.100

R2(config)# interface gi0/0 R2(config-if)# ip helper-address 198.51.100.100

R1 (config)# interface fa0/0 R1 (config-if)# ip address dhcp R1 (config-if)# no shutdown

R2(config)# interface gi0/0 R2(config-if)# ip address dhcp

R1 (config)# interface fa0/0 R1 (config-if)# ip helper-address 192.0.2.2

83. Which protocol prompts the Wireless LAN Controller to generate its own local web administration SSL certificate for GUI access?

HTTP

HTTPS

TACACS+

RADIUS

84. What is the purpose of a southbound API in a control based networking architecture?

facilities communication between the controller and the applications

integrates a controller with other automation and orchestration tools

allows application developers to interact with the network

facilities communication between the controller and the networking hardware

85. 1.Which communication interaction takes place when a southbound API is used?

between the SDN controller and PCs on the network

between the SDN controller and switches and routers on the network

between the SDN controller and services and applications on the network

between network applications and switches and routers on the network

86. Drag the OSPF parameters to the correct places on the right.

87. Which two capacities of Cisco DNA Center make it more extensible? (Choose two)

adapters that support all families of Cisco IOS software

SDKs that support interaction with third-party network equipment

customized versions for small, medium, and large enterprises

REST APIs that allow for external applications to interact natively with Cisco DNA Center

modular design that is upgradable as needed

88. Which 802.11 frame type is association response?

management

protected frame

control

action

89. Which command should you enter to verify the priority of a router in an HSRP group?

show hsrp

show sessions

show interfaces

show standby

90. Refer to the exhibit.

What action establishes the OSPF neighbor relationship without forming an adjacency?

modify priority

modify process ID

modify hello interval

modify network type

Page 10 of 12

91. What are two descriptions of three-tier network topologies? (Choose two)

The core and distribution layers perform the same functions

The access layer manages routing between devices in different domains

The network core is designed to maintain continuous connectivity when devices fail

The core layer maintains wired connections for each host

The distribution layer runs Layer 2 and Layer 3 technologies

92. Refer to the exhibit.

What is the effect of this configuration?

All ARP packets are dropped by the switch

Egress traffic is passed only if the destination is a DHCP server.

All ingress and egress traffic is dropped because the interface is untrusted

The switch discard all ingress ARP traffic with invalid MAC-to-IP address bindings

93. What is the benefit of using FHRP?

balancing traffic across multiple gateways in proportion to their loads

reduced management overhead on network routers

reduced ARP traffic on the network

higher degree of availability

94. Which implementation provides the strongest encryption combination for the wireless environment?

WPA2 + AES

WPA + AES

WEP

WPA + TKIP

95. Which attribute does a router use to select the best path when two or more different routes to the same destination exist from two different routing protocols?

dual algorithm

metric

administrative distance

hop count

96. Refer to exhibit.

Which statement explains the configuration error message that is received?

It is a broadcast IP address

The router does not support /28 mask

It belongs to a private IP address range

It is a network IP address

97. Which function does the range of private IPv4 addresses perform?

allows multiple companies to each use the same addresses without conflicts

provides a direct connection for hosts from outside of the enterprise network

ensures that NAT is not required to reach the internet with private range addressing

enables secure communications to the internet for all external hosts

98. An administrator must secure the WLC from receiving spoofed association requests.

Which steps must be taken to configure the WLC to restrict the requests and force the user to wait 10 ms to retry an association request?

Enable Security Association Teardown Protection and set the SA Query timeout to 10

Enable the Protected Management Frame service and set the Comeback timer to 10

Enable 802.1x Layer 2 security and set the Comeback timer to 10

Enable MAC filtering and set the SA Query timeout to 10

99. Drag and Drop the benefits of a Cisco Wireless LAN Controller from the left onto the correct examples on the right

100. Drag each route source from the left to the numbers on the right. Beginning with the lowest and ending with the highest administrative distance.

Page 11 of 12

101. How does a switch process a frame received on Fa0/1 with the destination MAC address of 0e38.7363.657b when the table is missing the address?

It floods the frame to all interfaces except Fa0/1.

It forwards the frame back out of interface Fa0/1.

It drops the frame immediately.

It holds the frame until the MAC address timer expires and then drops the frame.

102. Refer to the exhibit.

Router R4 is dynamically learning the path to the server. If R4 is connected to R1 via OSPF Area 20, to R2 via R2 BGP, and to R3 via EIGRP 777, which path is installed in the routing table of R4?

the path through R2, because the EBGP administrative distance is 20

the path through R2, because the IBGP administrative distance is 200

the path through R1, because the OSPF administrative distance is 110

the path through R3, because the EIGRP administrative distance is lower than OSPF and BGP

103. Which technology is appropriate for communication between an SDN controller and applications running over the network?

OpenFlow

Southbound API

NETCONF

REST API

104. Refer to the exhibit.

Switch 1

VLAN 110 C 32778 0018.184e.3c00

Switch 2

VLAN 110 C 24586 001a.e3ff.a680

Switch 3

VLAN 110 C 28682 0022.55cf.cc00

Switch 4

VLAN 110 C 64000 0e38.7363.657f

Which switch becomes the root of the spanning tree for VLAN 110?

Switch 1

Switch 2

Switch 3

Switch 4

105. Which command is used to configure an IPv6 static default route?

ipv6 route ::/0 interface next-hop

ipv6 route default interface next-hop

ipv6 route 0.0.0.0/0 interface next-hop

ip route 0.0.0.0/0 interface next-hop

106. What is a characteristic of spine-and-leaf architecture?

Each device is separated by the same number of hops

It provides variable latency

It provides greater predictability on STP blocked ports

Each link between leaf switches allows for higher bandwidth

107. Refer to the exhibit.

The entire contents of the MAC address table are shown. Sales-4 sends a data frame to Sales-1.

What does the switch do as it receives the frame from Sales-4?

Map the Layer 2 MAC address to the Layer 3 IP address and forward the frame

Insert the source MAC address and port into the forwarding table and forward the frame to Sales-1

Perform a lookup in the MAC address table and discard the frame due to a missing entry

Flood the frame out of all ports except on the port where Sales-1 is connected

108. Refer to the exhibit.

Which path is used by the router for Internet traffic?

209.165.200.0/27

10.10.10.0/28

0.0.0.0/0

10.10.13.0/24

109. In software-defined architecture, which place handles switching for traffic through a Cisco router?

Data

Control

Management

Application

110. When a site-to-site VPN is configured, which IPsec mode provides encapsulation and encryption of the entire original IP packet?

IPsec tunnel mode with AH

IPsec transport mode with AH

IPsec tunnel mode with ESP

IPsec transport mode with ESP

Page 12 of 12

111. What is a similarly between 1000BASE-LX and 1000BASE-T standards?

Both use the same data-link header and trailer formats

Both cable types support LP connectors

Both cable types support RJ-45 connectors

Both support up to 550 meters between nodes

112. An engineer is tasked with verifying network configuration parameters on a client workstation to report back to the team lead.

Drag and drop the node identifiers from the left onto the network parameters on the right.

113. Refer to the exhibit.

An administrator must configure interfaces Gi1/1 and Gi1/3 on switch SW11 PC-1 and PC-2 must be placed in the Data VLAN and Phone-1 must be placed in the Voice VLAN.

Which configuration meets these requirements?

Option A

interface gigabitethernet1/1

switchport mode access

switchport access vlan 8

!

interface gigabitethernet1/3

switchport mode access

switchport voice vlan 8

switchport access vlan 9

Option B

interface gigabitethernet1/1

switchport mode access

switchport access vlan 9

!

interface gigabitethernet1/3

switchport mode trunk

switchport voice vlan 8

switchport access vlan 9

Option C

interface gigabitethernet1/1

switchport mode access

switchport access vlan 8

!

interface gigabitethernet1/3

switchport mode access

switchport access vlan 8

switchport voice vlan 9

Option D

interface gigabitethernet1/1

switchport mode access

switchport access vlan 8

!

interface gigabitethernet1/3

switchport mode trunk

switchport voice vlan 8

switchport access vlan 9

Option A

Option B

Option C

Option D

114. What makes Cisco DNA Center different from traditional network management applications and their management of networks?

It only supports auto-discovery of network elements in a green field deployment.

It modular design allows someone to implement different versions to meet the specific needs of an organization

It abstracts policy from the actual device configuration

It does not support high availability of management functions when operating in cluster mode

115. What is the role of a firewall in an enterprise network?

determines which packets are allowed to cross from unsecured to secured networks

processes unauthorized packets and allows passage to less secure segments of the network

forwards packets based on stateless packet inspection

explicitly denies all packets from entering an administrative domain

116. What are two improvements provided by automation for network management in an SDN environment? (Choose two)

Artificial intelligence identifies and prevents potential design failures

Data collection and analysis tools establish a baseline for the network

New devices are onboarded with minimal effort

Machine learning minimizes the overall error rate when automating troubleshooting processes

Proprietary Cisco APIs leverage multiple network management tools

117. Which network allows devices to communicate without the need to access the Internet?

172.9.0.0/16

172.28.0.0/16

192.0.0.0/8

209.165.201.0/24

118. What are two characteristics of a controller-based network? (Choose two)

The administrator can make configuration updates from the CLI

It uses northbound and southbound APIs to communicate between architectural layers

It moves the control plane to a central point

It decentralizes the control plane, which allows each device to make its own forwarding decisions

It uses Telnet to report system issues.