Big Halloween Sale 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: sale65best

Free Cisco 200-301 Practice Exam with Questions & Answers | Set: 4

Questions 151

Which action implements physical access control as part of the security program of an organization?

Options:
A.

configuring a password for the console port

B.

backing up syslogs at a remote location

C.

configuring enable passwords on network devices

D.

setting up IP cameras to monitor key infrastructure

Cisco 200-301 Premium Access
Questions 152

Which Layer 2 switch function encapsulates packets for different VLANs so that the packets traverse the same port and maintain traffic separation between the VLANs?

Options:
A.

VLAN numbering

B.

VLAN DSCP

C.

VLAN tagging

D.

VLAN marking

Questions 153

Refer to the exhibit.

200-301 Question 153

Which two commands must be configured on router R1 to enable the router to accept secure remote-access connections? (Choose two)

Options:
A.

transport input telnet

B.

crypto key generate rsa

C.

ip ssh pubkey-chain

D.

login console

E.

username cisco password 0 Cisco

Questions 154

Refer to the exhibit.

200-301 Question 154

R1 learns all routes via OSPF Which command configures a backup static route on R1 to reach the 192 168.20.0/24 network via R3?

Options:
A.

R1(config)#ip route 192.168.20.0 255.255.0.0 192.168.30.2

B.

R1(config)#ip route 192.168.20.0 255.255.255.0 192.168.30.2 90

C.

R1(config)#ip route 192.168.20.0 255.255.255.0 192.168.30.2 111

D.

R1(config)#ip route 192.168.20.0 255.255.255.0 192.168.30.2

Questions 155

Refer to the exhibit.

200-301 Question 155

Users will be using a preconfigured secret key and SSID and must have a secured key hashing algorithm configured. The AAA server must not be used for the user authentication method. Which action completes the task?

Options:
A.

Enable AutoConfig iPSK.

B.

SetCCMP128(AES).

C.

Configure PSK Format HEX with key string.

D.

Configure PSK-SHA2.

Questions 156

Drag and drop the Rapid PVST+ forwarding slate actions from the loft to the right. Not all actions are used.

200-301 Question 156

Options:
Questions 157

Which action is taken by the data plane within a network device?

Options:
A.

forwards traffic to the next hop

B.

constructs a routing table based on a routing protocol

C.

provides CLI access to the network device

D.

looks up an egress interface in the forwarding information base

Questions 158

Refer to the exhibit.

200-301 Question 158

A static route must be configured on R14 to forward traffic for the 172 21 34 0/25 network that resides on R86 Which command must be used to fulfill the request?

Options:
A.

ip route 172.21.34.0 255.255.255.192 10.73.65.65

B.

ip route 172.21.34.0 255.255.255.0 10.73.65.65

C.

ip route 172.21.34.0 255.255.128.0 10.73.65.64

D.

ip route 172.21.34.0 255.255.255.128 10.73.65.66

Questions 159

What is a requirement for nonoverlapping Wi-Fi channels?

Options:
A.

different security settings

B.

discontinuous frequency ranges

C.

different transmission speeds

D.

unique SSIDs

Questions 160

Drag and drop the threat-mitigation techniques from the left onto the types of threat or attack they mitigate on the right.

200-301 Question 160

Options:
Questions 161

Refer to the exhibit.

200-301 Question 161

Network services must be enabled on interface Gil/0734. Which configuration meets the needs for this implementation?

A)

200-301 Question 161

B)

200-301 Question 161

C)

200-301 Question 161

D)

200-301 Question 161

Options:
A.

Option

B.

Option

C.

Option

D.

Option

Questions 162

Refer to the exhibit.

200-301 Question 162

Which configuration allows routers R14 and R86 to form an OSPFv2 adjacency while acting as a central point for exchanging OSPF information between routers?

A)

200-301 Question 162

B)

200-301 Question 162

C)

200-301 Question 162

D)

200-301 Question 162

Options:
A.

Option A

B.

Option B

C.

Option C

D.

Option D

Questions 163

Refer to the exhibit.

200-301 Question 163

Users on existing VLAN 100 can reach sites on the Internet. Which action must the administrator take to establish connectivity to the Internet for users in VLAN 200?

Options:
A.

Define a NAT pool on the router.

B.

Configure static NAT translations for VLAN 200.

C.

Configure the ip nat outside command on another interface for VLAN 200.

D.

Update the NAT INSIDF RANGFS ACL

Questions 164

Refer to the exhibit.

200-301 Question 164

Which two configurations must the engineer apply on this network so that R1 becomes the DR? (Choose two.)

A)

200-301 Question 164

B)

200-301 Question 164

C)

200-301 Question 164

D)

200-301 Question 164

E)

200-301 Question 164

Options:
A.

Option A

B.

Option B

C.

Option C

D.

Option D

E.

Option E

Questions 165

Which interface mode must be configured to connect the lightweight APs in a centralized architecture?

Options:
A.

WLAN dynamic

B.

management

C.

trunk

D.

access

Questions 166

A network engineer must configure two new subnets using the address block 10 70 128 0/19 to meet these requirements:

• The first subnet must support 24 hosts

• The second subnet must support 472 hosts

• Both subnets must use the longest subnet mask possible from the address block

Which two configurations must be used to configure the new subnets and meet a requirement to use the first available address in each subnet for the router interfaces? (Choose two )

Options:
A.

interface vlan 1234ip address 10.70.159.1 255.255.254.0

B.

interface vlan 1148ip address 10.70.148.1 255.255.254.0

C.

interface vlan 4722ip address 10.70.133.17 255.255.255.192

D.

interface vlan 3002ip address 10.70.147.17 255.255.255.224

E.

interface vlan 155ip address 10.70.155.65 255.255.255.224

Questions 167

Refer to the exhibit.

200-301 Question 167

Which command must be issued to enable a floating static default route on router A?

Options:
A.

lp route 0.0.0.0 0.0.0.0 192.168.1.2

B.

ip default-gateway 192.168.2.1

C.

ip route 0.0.0.0 0.0.0.0 192.168.2.1 10

D.

ip route 0.0.0.0 0.0.0.0 192.168.1.2 10

Questions 168

Refer to the exhibit.

200-301 Question 168

Which action must be taken to ensure that router A is elected as the DR for OSPF area 0?

Options:
A.

Configure the OSPF priority on router A with the lowest value between the three routers.

B.

Configure router B and router C as OSPF neighbors of router A.

C.

Configure the router A interfaces with the highest OSPF priority value within the area.

D.

Configure router A with a fixed OSPF router ID

Questions 169

Refer to the exhibit.

200-301 Question 169

Host A sent a data frame destined for host D

200-301 Question 169

What does the switch do when it receives the frame from host A?

Options:
A.

It drops the frame from the switch CAM table.

B.

It floods the frame out of all ports except port Fa0/1.

C.

It shuts down the port Fa0/1 and places it in err-disable mode.

D.

It experiences a broadcast storm.

Questions 170

Refer to the exhibit.

200-301 Question 170

What is a reason for poor performance on the network interface?

Options:
A.

The interface is receiving excessive broadcast traffic.

B.

The cable connection between the two devices is faulty.

C.

The interface is operating at a different speed than the connected device.

D.

The bandwidth setting of the interface is misconfigured

Questions 171

What is one reason to implement LAG on a Cisco WLC?

Options:
A.

to increase security and encrypt management frames

B.

to provide link redundancy and load balancing

C.

to allow for stateful and link-state failover

D.

to enable connected switch ports to failover and use different VLANs

Questions 172

Refer to the exhibit.

200-301 Question 172

A network engineer must update the configuration on Switch2 so that it sends LLDP packets every minute and the information sent via LLDP is refreshed every 3 minutes Which configuration must the engineer apply?

A)

200-301 Question 172

B)

200-301 Question 172

C)

200-301 Question 172

D)

200-301 Question 172

Options:
A.

Option A

B.

Option B

C.

Option C

D.

Option D

Questions 173

A Cisco engineer must configure a single switch interface to meet these requirements

• accept untagged frames and place them in VLAN 20

• accept tagged frames in VLAN 30 when CDP detects a Cisco IP phone

Which command set must the engineer apply?

A)

200-301 Question 173

B)

200-301 Question 173

C)

200-301 Question 173

D)

200-301 Question 173

Options:
A.

Option A

B.

Option B

C.

Option C

D.

Option D

Questions 174

Refer to the exhibit.

200-301 Question 174

Which command configures OSPF on the point-to-point link between routers R1 and R2?

Options:
A.

router-id 10.0.0.15

B.

neighbor 10.1.2.0 cost 180

C.

ipospf priority 100

D.

network 10.0.0.0 0.0.0.255 area 0

Questions 175

Which wireless security protocol relies on Perfect Forward Secrecy?

Options:
A.

WPA3

B.

WPA

C.

WEP

D.

WPA2

Questions 176

A network engineer must implement an IPv6 configuration on the vlan 2000 interface to create a routable locally-unique unicast address that is blocked from being advertised to the internet. Which configuration must the engineer apply?

Options:
A.

interface vlan 2000ipv6 address ffc0:0000:aaaa::1234:2343/64

B.

interface vlan 2000Ipv6 address fc00:0000:aaaa:a15d:1234:2343:8aca/64

C.

interface vlan 2000ipv6 address fe80;0000:aaaa::1234:2343/64

D.

interface vlan 2000ipv6 address fd00::1234:2343/64

Questions 177

What is a function of TFTP in network operations?

Options:
A.

transfers a backup configuration file from a server to a switch using a username and password

B.

transfers files between file systems on a router

C.

transfers a configuration files from a server to a router on a congested link

D.

transfers IOS images from a server to a router for firmware upgrades

Questions 178

Refer to the exhibit.

200-301 Question 178

Which route must be configured on R1 so that OSPF routing is used when OSPF is up. but the server is still reachable when OSPF goes down?

Options:
A.

ip route 10.1.1.10 255.255.255.255 172.16.2.2 100

B.

ip route 10.1.1.0 255.255.255.0 gi0/1 125

C.

ip route 10.1.1.0 255.255.255.0 172.16.2.2 100

D.

ip route 10.1.1.10 255.255.255.255 gi0/0 125

Questions 179

Refer to the exhibit.

200-301 Question 179

Packets received by the router from BGP enter via a serial interface at 209 165 201 1 Each route is present within the routing table Which interface is used to forward traffic with a destination IP of 10.1.1.19?

Options:
A.

F0/4

B.

F0/0

C.

F0/1

D.

F0/3

Questions 180

A network engineer is configuring a switch so that it is remotely reachable via SSH. The engineer has already configured the host name on the router. Which additional command must the engineer configure before entering the command to generate the RSA key?

Options:
A.

password password

B.

crypto key generate rsa modulus 1024

C.

ip domain-name domain

D.

ip ssh authentication-retries 2

Questions 181

What causes a port to be placed in the err-disabled state?

Options:
A.

nothing plugged into the port

B.

link flapping

C.

shutdown command issued on the port

D.

latency

Questions 182

What is an expected outcome when network management automation is deployed?

Options:
A.

A distributed management plane must be used.

B.

Software upgrades are performed from a central controller

C.

Complexity increases when new device configurations are added

D.

Custom applications are needed to configure network devices

Questions 183

200-301 Question 183

Refer to the exhibit. What is the cause of the issue?

Options:
A.

STP

B.

port security

C.

wrong cable type

D.

shutdown command

Questions 184

Refer to the exhibit.

200-301 Question 184

An engineer is updating the R1 configuration to connect a new server to the management network. The PCs on the management network must be blocked from pinging the default gateway of the new server. Which command must be configured on R1 to complete the task?

Options:
A.

R1(config)#lp route 172.16.2.2 255.255.255.248 gi0/1

B.

R1(config)#jp route 172.16.2.2 255.255.255.255 gi0/0

C.

R1(config>#ip route 172.16.2.0 255.255.255.0 192.168.1.15

D.

R1(conflg)#ip route 172.16.2.0 255.255.255.0 192.168.1.5

Questions 185

Drag and drop the TCP or UDP details from the left onto their corresponding protocols on the right.

200-301 Question 185

Options:
Questions 186

Refer to the exhibit.

200-301 Question 186

An engineer is configuring a new router on the network and applied this configuration. Which additional configuration allows the PC to obtain its IP address from a DHCP server?

Options:
A.

Configure the ip dhcp relay information command under interface Gi0/1.

B.

Configure the ip dhcp smart-relay command globally on the router

C.

Configure the ip helper-address 172.16.2.2 command under interface Gi0/0

D.

Configure the ip address dhcp command under interface Gi0/0

Questions 187

A router received three destination prefixes:10.0.0/18, and 10.0.0/24. When the show ip route command is executed, which output does it return?

A)

200-301 Question 187

B)

200-301 Question 187

C)

200-301 Question 187

D)

200-301 Question 187

Options:
A.

Option A

B.

Option B

C.

Option C

D.

Option D

Questions 188

Drag and drop the facts about wireless architectures from the left onto the types of access point on the right. Not all options are used.

200-301 Question 188

Options:
Questions 189

Which WLC management connection type is vulnerable to man-in-the-middle attacks?

Options:
A.

SSH

B.

HTTPS

C.

Telnet

D.

console

Questions 190

What is a function of a Next-Generation IPS?

Options:
A.

makes forwarding decisions based on learned MAC addresses

B.

serves as a controller within a controller-based network

C.

integrates with a RADIUS server to enforce Layer 2 device authentication rules

D.

correlates user activity with network events

Questions 191

Drag and drop the characteristics of networking from the left onto the networking types on the right.

200-301 Question 191

Options:
Questions 192

Refer to the exhibit.

200-301 Question 192

An engineer assumes a configuration task from a peer Router A must establish an OSPF neighbor relationship with neighbor 172 1 1 1 The output displays the status of the adjacency after 2 hours. What is the next step in the configuration process for the routers to establish an adjacency?

Options:
A.

Configure router A to use the same MTU size as router B.

B.

Set the router B OSPF ID to a nonhost address.

C.

Configure a point-to-point link between router A and router B.

D.

Set the router B OSPF ID to the same value as its IP address

Questions 193

Refer to the exhibit.

200-301 Question 193

An IP subnet must be configured on each router that provides enough addresses for the number of assigned hosts and anticipates no more than 10% growth for now hosts. Which configuration script must be used?

A)

200-301 Question 193

B)

200-301 Question 193

C)

200-301 Question 193

D)

200-301 Question 193

Options:
A.

Option A

B.

Option B

C.

Option C

D.

Option D

Questions 194

Refer to the exhibit.

200-301 Question 194

Users need to connect to the wireless network with IEEE 802. 11r-compatible devices. The connection must be maintained as users travel between floors or to other areas in the building What must be the configuration of the connection?

Options:
A.

Select the WPA Policy option with the CCKM option.

B.

Disable AES encryption.

C.

Enable Fast Transition and select the FT 802.1x option.

D.

Enable Fast Transition and select the FT PSK option.

Questions 195

Which protocol uses the SSL?

Options:
A.

HTTP

B.

SSH

C.

HTTPS

D.

Telnet

Questions 196

Refer to the exhibit.

200-301 Question 196

Packets received by the router from BGP enter via a serial interface at 209.165.201.10. Each route is present within the routing table. Which interface is used to forward traffic with a destination IP of 10.10.10.24?

Options:
A.

F0/10

B.

F0/11

C.

F0/12

D.

F0/13

Questions 197

Refer to the exhibit.

200-301 Question 197

A company is configuring a failover plan and must implement the default routes in such a way that a floating static route will assume traffic forwarding when the primary link goes down. Which primary route configuration must be used?

Options:
A.

ip route 0.0.0.0 0.0.0.0 192.168.0.2 GigabitEthernetl/0

B.

ip route 0.0.0.0 0.0.0.0 192.168.0.2 tracked

C.

ip route 0.0.0.0 0.0.0.0 192.168.0.2 floating

D.

ip route 0.0.0.0 0.0.0.0 192.168.0.2

Questions 198

Refer to the exhibit.

200-301 Question 198

Routers R1 and R3 have the default configuration The router R2 priority is set to 99 Which commands on R3 configure it as the DR in the 10.0 4.0/24 network?

Options:
A.

R3(config)#interface Gig0/1 R3(config-if)#ip ospf priority 100

B.

R3(config)#interface Gig0/0 R3(config-if)#ip ospf priority 100

C.

R3(config)#interface Gig0/0 R3(config-if)i=ip ospf priority 1

D.

R3(config)#interface Gig0/1 R3(config-if)#ip ospf priority 0

Questions 199

Refer to the exhibit.

200-301 Question 199

An engineer is configuring an EtherChannel using LACP between Switches 1 and 2 Which configuration must be applied so that only Switch 1 sends LACP initiation packets?

Options:
A.

Switch 1 (config-if)#channel-group 1 mode onSwrtch2(config-if)#channel-group 1 mode passive

B.

Switch1(config-if)#channel-group 1 mode passiveSwitch2(config-if)#channel-group 1 mode active

C.

Switch1{config-if)£channel-group 1 mode activeSwitch2(config-if)#channel-group 1 mode passive

D.

Switch1(config-if)#channel-group 1 mode onSwitch2(config-if)#channel-group 1 mode active

Questions 200

How does Rapid PVST+ create a fast loop-free network topology?

Options:
A.

lt requires multiple links between core switches

B.

It generates one spanning-tree instance for each VLAN

C.

It maps multiple VLANs into the same spanning-tree instance

D.

It uses multiple active paths between end stations.

Exam Code: 200-301
Certification Provider: Cisco
Exam Name: Implementing and Administering Cisco Solutions (200-301 CCNA) v1.1
Last Update: Oct 30, 2025
Questions: 1197