200-301 by Cisco Actual Free Exam Q&As

Question 1

An organization developed new security policies and decided to print the policies and distribute them to all personnel so that employees review and apply the policies. Which element of a security program is the organization implementing?

A. Asset identification B. Physical access control C. Vulnerability control D. User training

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 2

Which CRUD operation modifies an existing table or view?

A. update B. create C. replace D. read

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 3

Which function does the range of private IPv4 addresses perform?

A. enables secure communications to the internet for all external hosts B. provides a direct connection for hosts from outside of the enterprise network C. allows multiple companies to each use the same addresses without conflicts D. ensures that NAT is not required to reach the internet with private range addressing

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 4

What is a difference between RADIUS and TACACS+?

A. RADIUS logs all commands that are entered by the administrator, but TACACS+ logs only start, stop, and interim commands B. TACACS+ separates authentication and authorization, and RADIUS merges them C. RADIUS is most appropriate for dial authentication, but TACACS+ can be used for multiple types of authentication D. TACACS+ encrypts only password information and RADIUS encrypts the entire payload

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 5

What is the purpose of using First Hop Redundancy Protocol on a specific subnet?

A. forwards multicast hello messages between routers B. filters traffic based on destination IP addressing C. sends the default route to the hosts on a network D. ensures a loop-free physical topology

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 6

How does MAC learning function?

A. restricts ports to a maximum of 10 dynamically-learned addressses B. inserts MAC addressses dynamically into the CAM table C. protects against denial of service attacks D. rewrites the source and destination MAC addresss

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 7

Refer to the exhibit.

Which switch becomes the root of a spanning tree for VLAN 20 if all links are of equal speed?

A. SW2 B. SW4 C. SW3 D. SW1

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 8

Drag and drop the TCP or UDP details from the left onto their corresponding protocols on the right.

Discussion 0

Correct Answer:

Explanation:
Cisco CCNA 200-301 v1.1 Network Fundamentals questions of this type test whether each item is matched to the technology that actually performs that role. The reliable method is to classify each term by operating layer, packet behavior, management function, or security purpose before matching it. Several terms in these items are legitimate Cisco networking concepts, but they become wrong when assigned to the wrong protocol or plane. The mapping retained in the document follows that separation: transport behavior is matched to TCP or UDP, wireless or security terms are matched to their mechanisms, and automation items are matched to the correct API or management model. This matters operationally because troubleshooting fails quickly when a forwarding-plane function is treated as a management-plane feature or when a security control is applied to the wrong threat. The shown mapping is therefore retained as the verified response.

Question 9

Drag and drop the lightweight access point operation modes from the left onto the descriptions on the right

Discussion 0

Correct Answer:

Explanation:
Cisco CCNA 200-301 v1.1 Network Fundamentals questions of this type test whether each protocol, component, address type, or management concept is matched to its correct operating role. The safe method is to classify every item by function: what it does, where it operates, and what problem it solves. Several distractors are usually valid networking terms, but they belong to a different layer or a different operational workflow. The shown mapping keeps those boundaries straight and avoids assigning a feature to the wrong technology. In practice, this same skill is required when troubleshooting because confusing a management- plane function with a forwarding-plane function, or a wireless security feature with an authentication feature, leads to incorrect fixes. The mapping shown in the file is therefore retained and explained as the verified selection.

Question 10

Refer to the exhibit.

An engineer is configuring the HO router. Which IPv6 address configuration must be applied to the router Fa0
/1 interface for the router to assign a unique 64-brt IPv6 address to Itself?

A. ipv6 address 2001 :DB8:0:1:FFFF:C601:420F:7/64 B. iov6 address 2001 :DB8:0:1:FE80:C601:420F:7/64 C. ipv6 address 2001:DB8:0:1:C601:42FF:FE0F:7/64 D. ipv6 address 2001:DB8:0:1:C601:42FE:800F:7/64

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 11

Refer to the exhibit.

Router R4 is dynamically learning the path to the server. If R4 is connected to R1 via OSPF Area 20, to R2 via R2 BGP, and to R3 via EIGRP 777, which path is installed in the routing table of R4?

A. the path through R2. because the IBGP administrative distance is 200 B. the path through R2 because the EBGP administrative distance is 20 C. the path through R3. because the EIGRP administrative distance is lower than OSPF and BGP D. the path through R1, because the OSPF administrative distance is 110

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 12

What is represented in line 3 within this JSDN schema?

A. object B. key C. value D. array

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 13

What is the difference in data transmission delivery and reliability between TCP and UDP?

A. TCP transmits data at a higher rate and ensures packet delivery. UDP retransmits lost data to ensure applications receive the data on the remote end. B. UDP sets up a connection between both devices before transmitting data. TCP uses the three-way handshake to transmit data with a reliable connection. C. UDP is used for multicast and broadcast communication. TCP is used for unicast communication and transmits data at a higher rate with error checking. D. TCP requires the connection to be established before transmitting data. UDP transmits data at a higher rate without ensuring packet delivery.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 14

Which two protocols must be disabled to increase security for management connections to a Wireless LAN Controller? (Choose two.)

A. Telnet B. HTTP C. SSH D. HTTPS E. TFTP

Discussion 0

Correct Answer: A,B Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 15

Refer to the exhibit. The loopback IP of R3 has been learned via the two interfaces on R1. R1 is configured with a reference bandwidth of 10 Gbps. Based on the metric calculations, which next hop IP would be used for outgoing routing?

A. 10.12.0.5 B. 10.12.0.6 C. 10.12.0.2 D. 10.12.0.1

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Cisco Certified Network Associate - 200-301 Exam Practice Test