Weekend Sale 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: sale65best

Free Cisco 200-301 Practice Exam with Questions & Answers | Set: 4

Questions 61

Which output displays a JSON data representation?

200-301 Question 61

Options:
A.

Option A

B.

Option B

C.

Option C

D.

Option D

Cisco 200-301 Premium Access
Questions 62

What is a practice that protects a network from VLAN hopping attacks?

Options:
A.

Enable dynamic ARP inspection

B.

Configure an ACL to prevent traffic from changing VLANs

C.

Change native VLAN to an unused VLAN ID

D.

Implement port security on internet-facing VLANs

Questions 63

What are network endpoints?

Options:
A.

act as routers to connect a user to the service prowler network

B.

a threat to the network if they are compromised

C.

support inter-VLAN connectivity

D.

enforce policies for campus-wide traffic going to the internet

Questions 64

Refer to the exhibit.

200-301 Question 64

What two conclusions should be made about this configuration? (Choose two )

Options:
A.

The designated port is FastEthernet 2/1

B.

This is a root bridge

C.

The spanning-tree mode is Rapid PVST+

D.

The spanning-tree mode is PVST+

E.

The root port is FastEthernet 2/1

Questions 65

What is a DHCP client?

Options:
A.

a workstation that requests a domain name associated with its IP address

B.

a host that is configured to request an IP address automatically

C.

a server that dynamically assigns IP addresses to hosts.

D.

a router that statically assigns IP addresses to hosts.

Questions 66

Which network action occurs within the data plane?

Options:
A.

compare the destination IP address to the IP routing table.

B.

run routing protocols (OSPF, EIGRP, RIP, BGP)

C.

make a configuration change from an incoming NETCONF RPC

D.

reply to an incoming ICMP echo request

Questions 67

Which level of severity must be set to get informational syslogs?

Options:
A.

alert

B.

critical

C.

notice

D.

debug

Questions 68

Drag and drop the QoS congestion management terms from the left onto the description on the right.

200-301 Question 68

Options:
Questions 69

What is a benefit of using a Cisco Wireless LAN Controller?

Options:
A.

Central AP management requires more complex configurations

B.

Unique SSIDs cannot use the same authentication method

C.

It supports autonomous and lightweight APs

D.

It eliminates the need to configure each access point individually

Questions 70

What are two southbound APIs? (Choose two )

Options:
A.

OpenFlow

B.

NETCONF

C.

Thrift

D.

CORBA

E.

DSC

Questions 71

Which action is taken by a switch port enabled for PoE power classification override?

Options:
A.

When a powered device begins drawing power from a PoE switch port a syslog message is generated

B.

As power usage on a PoE switch port is checked data flow to the connected device is temporarily paused

C.

If a switch determines that a device is using less than the minimum configured power it assumes the device has failed and disconnects

D.

Should a monitored port exceeds the maximum administrative value for power, the port is shutdown and err-disabled

Questions 72

What does an SDN controller use as a communication protocol to relay forwarding changes to a southbound API?

Options:
A.

OpenFlow

B.

Java

C.

REST

D.

XML

Questions 73

Refer to the exhibit.

200-301 Question 73

Which route type does the routing protocol Code D represent in the output?

Options:
A.

internal BGP route

B.

/24 route of a locally configured IP

C.

statically assigned route

D.

route learned through EIGRP

Questions 74

What are two characteristics of a controller-based network? (Choose two)

Options:
A.

The administrator can make configuration updates from the CLI

B.

It uses northbound and southbound APIs to communicate between architectural layers

C.

It moves the control plane to a central point.

D.

It decentralizes the control plane, which allows each device to make its own forwarding decisions

E.

It uses Telnet to report system issues.

Questions 75

Refer to the exhibit.

200-301 Question 75

A network administrator has been tasked with securing VTY access to a router. Which access-list entry accomplishes this task?

Options:
A.

access-list 101 permit tcp 10.1.10 0.0.0.255 172.16.10 0.0.0.255 eq ssh

B.

access-list 101 permit tcp 10.11.0 0.0.0.255 172.16.10 0.0.0.255 eq scp

C.

access-list 101 permit tcp 10.11.0 0.0.0.255 172.16.10 0.0.0.255 eq telnet

D.

access-list 101 permit tcp 10.1.10 0.0.0.255 172.16.10 0.0.0.255 eq https

Questions 76

Two switches are connected and using Cisco Dynamic Trunking Protocol SW1 is set to Dynamic Desirable

What is the result of this configuration?

Options:
A.

The link is in a down state.

B.

The link is in an error disables state

C.

The link is becomes an access port.

D.

The link becomes a trunk port.

Questions 77

Which protocol does an IPv4 host use to obtain a dynamically assigned IP address?

Options:
A.

ARP

B.

DHCP

C.

CDP

D.

DNS

Questions 78

Which device performs stateful inspection of traffic?

Options:
A.

firewall

B.

switch

C.

access point

D.

wireless controller

Questions 79

How are the switches in a spine-and-leaf topology interconnected?

Options:
A.

Each leaf switch is connected to one of the spine switches.

B.

Each leaf switch is connected to two spine switches, making a loop.

C.

Each leaf switch is connected to each spine switch.

D.

Each leaf switch is connected to a central leaf switch, then uplinked to a core spine switch.

Questions 80

Which command on a port enters the forwarding state immediately when a PC is connected to it?

Options:
A.

switch(config)#spanning-tree portfast default

B.

switch(config)#spanning-tree portfast bpduguard default

C.

switch(config-if)#spanning-tree portfast trunk

D.

switch(config-if)#no spanning-tree portfast

Exam Code: 200-301
Certification Provider: Cisco
Exam Name: Cisco Certified Network Associate
Last Update: Sep 13, 2025
Questions: 1191

Cisco Related Exams

350-201 - Performing CyberOps Using Core Security Technologies (CBRCOR)
500-445 - Implementing Cisco Contact Center Enterprise Chat and Email (CCECE)
500-901 - Cisco Data Center Unified Computing Infrastructure Design (DCICUC)
644-066 - Cisco Routing and Switching Solutions Specialist
500-220 - Engineering Cisco Meraki Solutions (ECMS) v2.2
700-846 - Cisco IoT Advantage for Account Managers (IOTAAM)
300-820 - Implementing Cisco Collaboration Cloud and Edge Solutions (300-820 CLCEI)
500-801 - IoT Connected Factory for Systems Engineers Exam
350-901 - Developing Applications using Cisco Core Platforms and APIs (DEVCOR)
500-174 - Implementing and Administering the FlexPod Solution v2.0 (FPIMPADM)
700-802 - IoT Manufacturing Account Manager
500-425 - Cisco AppDynamics Associate Administrator (CAAA)
300-815 - Implementing Cisco Advanced Call Control and Mobility Services (CLACCM)
100-140 - Cisco Certified Support Technician (CCST) IT Support
Cisco Free Access
Get Cisco Full Access

Cisco Free Exams
Cisco Free Exams
Examstrack offers free Cisco exam materials and practice tests to aid your Cisco certification journey.