We provide real 200-301 exam questions and answers braindumps in two formats. Download PDF & Practice Tests. Pass Cisco 200-301 Exam quickly & easily. The 200-301 PDF type is available for reading and printing. You can print more and practice many times. With the help of our Cisco 200-301 dumps pdf and vce product and material, you can easily pass the 200-301 exam.
Free demo questions for Cisco 200-301 Exam Dumps Below:
NEW QUESTION 1
Which protocol prompts the Wireless LAN Controller to generate its own local web administration SSL certificate for GUI access?
- A. HTTPS
- B. RADIUS
- C. TACACS+
- D. HTTP
Answer: A
Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-0/configuration-guide/b_cg80/b_cg80_chapter_011.html
NEW QUESTION 2
Which two must be met before SSH can operate normally on a Cisco IOS switch? (Choose two)
- A. The switch must be running a k9 (crypto) IOS image
- B. The Ip domain-name command must be configured on the switch
- C. IP routing must be enabled on the switch
- D. A console password must be configured on the switch
- E. Telnet must be disabled on the switch
Answer: AB
Explanation:
Reference: https://www.cisco.com/c/en/us/support/docs/security-vpn/secure-shell- ssh/4145-ssh.html
NEW QUESTION 3
Refer to the exhibit.
What are the two steps an engineer must take to provide the highest encryption and authentication using domain credentials from LDAP?
- A. Select PSK under Authentication Key Management
- B. Select WPA+WPA2 on Layer 2 Security
- C. Select Static-WEP + 802.1X on Layer 2 Security
- D. Select WPA Policy with TKIP Encryption
- E. Select 802.1X from under Authentication Key Management
Answer: BE
NEW QUESTION 4
What causes a port to be placed in the err-disabled state?
- A. nothing plugged into the port
- B. link flapping
- C. shutdown command issued on the port
- D. latency
Answer: B
NEW QUESTION 5
Refer to the exhibit.
How many JSON objects are presented?
- A. 1
- B. 2
- C. 3
- D. 4
Answer: D
NEW QUESTION 6
An organization has decided to start using cloud-provided services. Which cloud service allows the organization to install its own operating system on a virtual machine?
- A. platform-as-a-service
- B. software-as-a-service
- C. network-as-a-service
- D. infrastructure-as-a-service
Answer: B
Explanation:
Below are the 3 cloud supporting services cloud providers provide to customer:
+ SaaS (Software as a Service): SaaS uses the web to deliver applications that are managed by a thirdparty vendor and whose interface is accessed on the clients’ side. Most SaaS applications can be run directly from a web browser without any downloads or installations required, although some require plugins.
+ PaaS (Platform as a Service): are used for applications, and other development, while providing cloud components to software. What developers gain with PaaS is a framework they can build upon to develop or customize applications. PaaS makes the development, testing, and deployment of applications quick, simple, and cost-effective. With this technology, enterprise operations, or a thirdparty provider, can manage OSes, virtualization, servers, storage, networking, and the PaaS software itself. Developers, however, manage the applications.
+ IaaS (Infrastructure as a Service): self-service models for accessing, monitoring, and managing remote datacenter infrastructures, such as compute (virtualized or bare metal), storage, networking, and networking services (e.g. firewalls). Instead of having to purchase hardware outright, users can purchase IaaS based on consumption, similar to electricity or other utility billing.
In general, IaaS provides hardware so that an organization can install their own operating system.
NEW QUESTION 7
What are two improvements provided by automation for network management in an SDN environment? (Choose two)
- A. Data collection and analysis tools establish a baseline for the network
- B. Artificial intelligence identifies and prevents potential design failures.
- C. Machine learning minimizes the overall error rate when automating troubleshooting processes
- D. New devices are onboarded with minimal effort
- E. Proprietary Cisco APIs leverage multiple network management tools.
Answer: BE
NEW QUESTION 8
Refer to the exhibit.
Which type of configuration is represented in the output?
- A. Ansible
- B. JSON
- C. Chef
- D. Puppet
Answer: D
NEW QUESTION 9
in Which way does a spine and-leaf architecture allow for scalability in a network when additional access ports are required?
- A. A spine switch and a leaf switch can be added with redundant connections between them
- B. A spine switch can be added with at least 40 GB uplinks
- C. A leaf switch can be added with a single connection to a core spine switch.
- D. A leaf switch can be added with connections to every spine switch
Answer: D
Explanation:
Spine-leaf architecture is typically deployed as two layers: spines (such as an aggregation layer), and leaves (such as an access layer). Spine-leaf topologies provide high-bandwidth, low-latency, nonblocking server-to-server connectivity.
Leaf (aggregation) switches are what provide devices access to the fabric (the network of spine and leaf switches) and are typically deployed at the top of the rack. Generally, devices connect to the leaf switches.
Devices can include servers, Layer 4-7 services (firewalls and load balancers), and WAN or Internet routers. Leaf switches do not connect to other leaf switches. In spine-and-leaf architecture, every leaf should connect to every spine in a full mesh.
Spine (aggregation) switches are used to connect to all leaf switches and are typically deployed at the end or middle of the row. Spine switches do not connect to other spine switches.
NEW QUESTION 10
What differentiates the Cisco OfficeExtend AP mode from FlexConnect AP mode?
- A. FlexConnect allows a personal SSID to be configured on the AP, and personal SSIDs are not supported with OfficeExtend.
- B. OfficeExtend does not support DTLS tunneling of traffic to the WLC, and FlexConnect tunnels traffic to the WLC with DTLS.
- C. OfficeExtend tunnels all traffic through the WLC, and FlexConnect terminates client traffic at the AP switch port.
- D. FlexConnect must be deployed behind a router that NATs the client traffic, and OfficeExtend uses public IP sources.
Answer: C
NEW QUESTION 11
Refer to the exhibit.
Packets are flowing from 192.168 10.1 to the destination at IP address 192.168.20 75. Which next hop will the router select for the packet?
- A. 10.10101
- B. 10.10.10.11
- C. 10.10.10.12
- D. 10.101014
Answer: B
Explanation:
The router will select the next hop based on the longest prefix match in the routing table. The destination IP address 192.168.20.75 belongs to the network 192.168.0.0/19, which is a classless network created by subnetting the classful network 192.168.0.0/16. The routing table has two entries for the network 192.168.0.0/19, one with a metric of 219414 and another with a metric of 5. The router will choose the entry with the lower metric, which is 5, and forward the packet to the next hop 10.10.10.111.
NEW QUESTION 12
DRAG DROP
Drag and drop the characteristic from the left onto the IPv6 address type on the right.
Solution:
Does this meet the goal?
- A. Yes
- B. Not Mastered
Answer: A
NEW QUESTION 13
What are two reasons that cause late collisions to increment on an Ethernet interface? (Choose two)
- A. when the sending device waits 15 seconds before sending the frame again
- B. when the cable length limits are exceeded
- C. when one side of the connection is configured for half-duplex
- D. when Carrier Sense Multiple Access/Collision Detection is used
- E. when a collision occurs after the 32nd byte of a frame has been transmitted
Answer: BC
Explanation:
The usual possible causes are full-duplex/half-duplex mismatch, exceeded Ethernet cable length limits, or defective hardware such as incorrect cabling, non-compliant number of hubs in the network, or a bad NIC.
NEW QUESTION 14
Refer to the exhibit.
Which configuration for RTR-1 deniess SSH access from PC-1 to any RTR-1 interface and allows all other traffic?
A)
B)
C)
D)
- A. Option A
- B. Option B
- C. Option C
- D. Option D
Answer: B
NEW QUESTION 15
DRAG DROP
Drag and drop the statements about networking from the left onto the corresponding
networking types on the right. Not all statements are used.
Solution:
Controller-based Networking :– This type deploys a consistent configuration across multiple devices.– Southbound APIs are used to apply configurations.Traditional Networking :– A distributed control plane is needed.– This type requires a distributed management plane.
On a SND network the control plane is centralized on the the SND controller not distributed on the networking devices.
Northbound APIs do not interact with end devices. They allow the SND controller to interact with applications on the application plane
Does this meet the goal?
- A. Yes
- B. Not Mastered
Answer: A
NEW QUESTION 16
What is used to identify spurious DHCP servers?
- A. DHCPREQUEST
- B. DHCPDISCOVER
- C. DHCPACK
- D. DHCPOFFER
Answer: D
Explanation:
DHCPOFFER is used to identify spurious DHCP servers. A spurious DHCP server is any device that is configured to act as a DHCP server without the network administrator’s knowledge or permission. A spurious DHCP server can cause network problems by assigning incorrect or duplicate IP addresses to clients, or by redirecting traffic to malicious gateways. To prevent such attacks, the DHCP snooping feature can be enabled on switches to filter out invalid or unauthorized DHCP messages from untrusted sources1.
DHCP snooping works by intercepting and validating DHCP messages on a per-VLAN basis. The switch maintains a DHCP snooping binding database that contains information about the trusted hosts with leased IP addresses, such as MAC address, IP address, lease time, binding type, VLAN number, and interface information2. The switch also classifies its ports as trusted or untrusted. Trusted ports are those that connect to authorized DHCP servers or other trusted switches. Untrusted ports are those that connect to untrusted hosts or devices. The switch only allows DHCP messages from trusted ports, and drops any DHCP messages from untrusted ports that do not match the information in the binding database3.
The switch uses DHCPOFFER messages to identify spurious DHCP servers. A DHCPOFFER message is a response from a DHCP server to a client’s request for an IP address. The message contains the offered IP address, subnet mask, default gateway, and other configuration parameters for the client4. When the switch receives a DHCPOFFER message from an untrusted port, it compares the source MAC address and the offered IP address with the binding database. If there is no match, the switch considers the message as coming from a spurious DHCP server and drops it. The switch also logs an error message and increments a counter for the number of dropped messages5.
References:
✑ 1: Configuring DHCP Snooping - Cisco
✑ 2: Catalyst 6500 Release 12.2SX Software Configuration Guide - DHCP Snooping Binding Database
✑ 3: What is DHCP Snooping? - IONOS
✑ 4: Dynamic Host Configuration Protocol (DHCP) and Bootstrap Protocol (BOOTP) Parameters
✑ 5: Configuring DHCP Snooping - Cisco
NEW QUESTION 17
......
P.S. Easily pass 200-301 Exam with 903 Q&As Allfreedumps.com Dumps & pdf Version, Welcome to Download the Newest Allfreedumps.com 200-301 Dumps: https://www.allfreedumps.com/200-301-dumps.html (903 New Questions)
