Updated May-2022 100% Cover Real 200-301 Exam Questions - 100% Pass Guarantee [Q233-Q249]

Aktualisiert Mai-2022 100% Cover Real 200-301 Prüfungsfragen - 100% Pass Guarantee [Q233-Q249]

Mai 11, 2022 admin 0 Kommentare

Diesen Beitrag bewerten

Updated May-2022 100% Cover Real 200-301 Exam Questions – 100% Pass Guarantee

Use Real Cisco Dumps – 100% Free 200-301 Exam Dumps

Understanding functional and technical aspects of 200-301 CCNA Exam: Cisco Certified Network Associate Network Security Fundamentals

The following will be discussed here:

Configure and verify access control lists
Configure Layer 2 security features (DHCP snooping, dynamic ARP inspection, and port security)
Describe security program elements (user awareness, training, and physical access control)
Configure WLAN using WPA2 PSK using the GUI
Configure device access control using local passwords
Define key security concepts (threats, vulnerabilities, exploits, and mitigation techniques)
Security Fundamentals

NEW QUESTION 233
Which of the following are benefits of VLANs? (Choose three.)

They increase the size of collision domains.

They allow logical grouping of users by function.

They can enhance network security.

They increase the size of broadcast domains while decreasing the number of collision domains.

They increase the number of broadcast domains while decreasing the size of the broadcast domains.

They simplify switch administration.

NEW QUESTION 234
Siehe dazu die Abbildung.

Which two configurations must the engineer apply on this network so that R1 becomes the DR? (Choose two.) A)

B)

C)

D)

E)

Option A

Option B

Option C

Option D

Option E

NEW QUESTION 235
When a site-to-site VPN is used, which protocol is responsible for the transport of user data?

IKEv2

IKEv1

IPsec

MD5

Erläuterung
A site-to-site VPN allows offices in multiple fixed locations to establish secure connections with each other over a public network such as the Internet. A site-to-site VPN means that two sites create a VPN tunnel by encrypting and sending data between two devices. One set of rules for creating a siteto-site VPN is defined by IPsec.

NEW QUESTION 236
Drag and drop the DHCP snooping terms from the left onto the descriptions on the right.

NEW QUESTION 237
Siehe dazu die Abbildung.

The show ip ospf interface command has been executed on R1 How is OSPF configured?

The interface is not participating in OSPF

A point-to-point network type is configured

The default Hello and Dead timers are in use

There are six OSPF neighbors on this interface

NEW QUESTION 238
Siehe dazu die Abbildung.

R1 learns all routes via OSPF Which command configures a backup static route on R1 to reach the 192
168.20.0/24 network via R3?

R1(config)#ip route 192.168.20.0 255.255.0.0 192.168.30.2

R1(config)#ip route 192.168.20.0 255.255.255.0 192.168.30.2 90

R1(config)#ip route 192.168.20.0 255.255.255.0 192.168.30.2 111

R1(config)#ip route 192.168.20.0 255.255.255.0 192.168.30.2

NEW QUESTION 239
Siehe dazu die Abbildung.

An extended ACL has been configured and applied to router R2. The configuration failed to work as intended.
Which two changes stop outbound traffic on TCP ports 25 and 80 to 10.0.20.0/26 from the 10.0.10.0/26 subnet while still allowing all other traffic? (Choose two.)

Add a “permit ip any any” statement at the end of ACL 101 for allowed traffic.

Add a “permit ip any any” statement to the beginning of ACL 101 for allowed traffic.

The ACL must be moved to the Gi0/1 interface outbound on R2.

The source and destination IPs must be swapped in ACL 101.

The ACL must be configured the Gi0/2 interface inbound on R1.

NEW QUESTION 240
DRAG DROP
A network engineer is configuring an OSPFv2 neighbor adjacency. Drag and drop the parameters from the left onto their required categories on the right. No all parameters are used.

NEW QUESTION 241
Siehe dazu die Abbildung.

Which configuration issue is preventing the OSPF neighbor relationship from being established between the two routers?

R2 is using the passive-interface default command

R1 has an incorrect network command for interface Gi1/0

R2 should have its network command in area 1

R1 interface Gil/0 has a larger MTU size

NEW QUESTION 242
Siehe dazu die Abbildung.

Which action is expected from SW1 when the untagged frame is received on the GigabitEthernet0/1 interface?

The frame is processed in VLAN 5.

The frame is processed in VLAN 11

The frame is processed in VLAN 1

The frame is dropped

NEW QUESTION 243
Which unified access point mode continues to serve wireless clients after losing connectivity to the Cisco Wireless LAN Controller?

sniffer

mesh

flexconnect

local

NEW QUESTION 244
Refer to the exhibit. What does router R1 use as its OSPF router-ID?

10.10.1.10

10.10.10.20

172.16.15.10

192.168.0.1

OSPF uses the following criteria to select the router ID:
1. Manual configuration of the router ID (via the “router-id x.x.x.x” command under OSPF router configuration mode).
2. Highest IP address on a loopback interface.
3. Highest IP address on a non-loopback and active (no shutdown) interface.

NEW QUESTION 245
Siehe dazu die Abbildung.

An engineer is asked to insert the new VLAN into the existing trunk without modifying anything previously configured Which command accomplishes this task?

switchport trunk allowed vlan 100-104

switchport trunk allowed vlan add 104

switchport trunk allowed vlan all

switchport trunk allowed vlan 104

NEW QUESTION 246
Which action is taken by switch port enabled for PoE power classification override?

If a monitored port exceeds the maximum administrative value for power, the port is shutdown and err- disabled.

When a powered device begins drawing power from a PoE switch port, a syslog message is generated.

As power usage on a PoE switch port is checked, data flow to the connected device is temporarily paused.

If a switch determines that a device is using less than the minimum configured power, it assumes the device has failed and disconnects it.

Section: Network Fundamentals
Erläuterung:
PoE monitoring and policing compares the power consumption on ports with the administrative maximum value (either a configured maximum value or the port’s default value). If the power consumption on a monitored port exceeds the administrative maximum value, the following actions occur:
– A syslog message is issued.
– The monitored port is shut down and error-disabled.
– The allocated power is freed.
Reference: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/12-2SX/configuration/guide/ book/power_over_ethernet.pdf

NEW QUESTION 247
Siehe dazu die Abbildung.

Which route type does the routing protocol Code D represent in the output?

internal BGP route

/24 route of a locally configured IP

statically assigned route

route learned through EIGRP

NEW QUESTION 248
Which two actions influence the EIGRP route selection process? (Choose two)

The router calculates the reported distance by multiplying the delay on the exiting Interface by 256.

The router calculates the best backup path to the destination route and assigns it as the feasible successor.

The router calculates the feasible distance of all paths to the destination route

The advertised distance is calculated by a downstream neighbor to inform the local router of the bandwidth on the link

The router must use the advertised distance as the metric for any given route

Erläuterung
The reported distance (or advertised distance) is the cost from the neighbor to the destination. It is calculated from the router advertising the route to the network. For example in the topology below, suppose router A & B are exchanging their routing tables for the first time. Router B says “Hey, the best metric (cost) from me to IOWA is 50 and the metric from you to IOWA is 90” and advertises it to router A.
Router A considers the first metric (50) as the Advertised distance. The second metric (90), which is from NEVADA to IOWA (through IDAHO), is called the Feasible distance.

The reported distance is calculated in the same way of calculating the metric. By default (K1 = 1, K2 = 0, K3
= 1, K4 = 0, K5 = 0), the metric is calculated as follows:

NEW QUESTION 249
Siehe dazu die Abbildung.

What does router R1 use as its OSPF router-ID?

10.10.1.10

10.10.10.20

172.16.15.10

192.168.0.1

Erläuterung
OSPF uses the following criteria to select the router ID:1. Manual configuration of the router ID (via the
“router-id x.x.x.x” command under OSPF router configuration mode).2. Highest IP address on a loopback interface.3. Highest IP address on a non-loopback and active (no shutdown) interface.

Laden …