What is a zero-day exploit?

It is when a new network vulnerability is discovered before a fix is available

It is when the perpetrator inserts itself in a conversation between two parties and captures or alters data.

It is when the network is saturated with malicious traffic that overloads resources and bandwidth

It is when an attacker inserts malicious code into a SOL server.

A network engineer is replacing the switches that belong to a managed-services client with new Cisco Catalyst switches. The new switches will be configured for updated security standards, including replacing Telnet services with encrypted connections and doubling the modulus size from 1024. Which two commands must the engineer configure on the new switches? (Choose two.)

crypto key generate rsa general-keys modulus 1024

crypto key generate rsa usage-keys

crypto key generate rsa modulus 2048

What is the role of disaggregation in controller-based networking?

It divides the control-plane and data-plane functions.

It summarizes the routes between the core and distribution layers of the network topology.

It enables a network topology to quickly adjust from a ring network to a star network

It streamlines traffic handling by assigning individual devices to perform either Layer 2 or Layer 3 functions.

Why would VRRP be implemented when configuring a new subnet in a multivendor environment?

when a gateway protocol is required that support more than two Cisco devices for redundancy

to enable normal operations to continue after a member failure without requiring a change In a host ARP cache

to ensure that the spanning-tree forwarding path to the gateway is loop-free

to interoperate normally with all vendors and provide additional security features for Cisco devices

Which two practices are recommended for an acceptable security posture in a network? (Choose two)

Use a cryptographic keychain to authenticate to network devices

Disable unused or unnecessary ports, interfaces and services

Backup device configurations to encrypted USB drives for secure retrieval

maintain network equipment in a secure location

Use a cryptographic keychain to authenticate to network devices

Place internal email and file servers in a designated DMZ

Disable unused or unnecessary ports, interfaces and services

An administrator must use the password complexity not manufacturer-name command to prevent users from adding "cisco" as a password. Which command must be issued before this command?

Login authentication my-auth-list

An engineer is configuring router R1 with an IPv6 static route for prefix 2019:C15C:0CAF:E001::/64.The next hop must be 2019:C15C:0CAF:E002::1 The route must be reachable via the R1 Gigabit 0/0 interface. Which command configures the designated route?

R1(config-if)#ip route 2019:C15C:0CAF:E001::/64 GigabitEthernet0/0

R1(config)#ipv6 route 2019:C15C:0CAF:E001::/64 2019:C15C:0CAF:E002::1

R1(config-if)#ipv6 route 2019:C15C:0CAF:E001::/64 2019:C15C:0CAF:E002::1

R1(config-if)#ip route 2019:C15C:0CAF:E001::/64 GigabitEthernet0/0

R1(config)#ip route 2019:C15C:0CAF:E001::/64 GigabitEthernet0/0

Refer to the exhibit. A network engineer configures the Cisco WLC to authenticate local wireless clients against a RADIUS server Which task must be performed to complete the process?

Select Enable next to Network User

Change the Server Status to Disabled

Select Enable next to Management

Select Enable next to Network User

Change the Support for CoA to Enabled.

What is a function of Cisco Advanced Malware Protection for a Next-Generation IPS?

inspecting specific files and file types for malware

authorizing potentially compromised wireless traffic

inspecting specific files and file types for malware

Refer to the exhibit. Router R1 must be configured to reach the 10.0.3.0/24 network from the 10.0.1.0/24 segment.Which command must be used to configure the route?

Ip route 10.0.3.0 255.255.255.0 10.0.4.3

ip route 10.0.3.0 0.255255.255 10.0.4.2

route add 10.0.3.0 mask 255.255.255.0 10.0.4.3

Ip route 10.0.3.0 255.255.255.0 10.0.4.3

route add 10.0.3.0 0.255.255.255 10.0.4.2

Refer to the exhibit. The administrator must configure a floating sialic default route that points to 2001:db8:1234:2::1 and replaces the current default route only if it fails. Which command must the engineer configure on the CPE?

ipv6 route ::/128 2001 :db8:1234:2::1 3

ipv6 route ::/0 2001:db8:1234:2::1 3

ipv6 route ::/128 2001 :db8:1234:2::1 3

ipv6 route ::/0 2001:db8:1234:2::1 1

ipv6 route ::/0 2001:db8:1234:2::1 2

What is the function of "off-the-shell" switches in a controller-based network?

setting packet-handling policies

providing a central view of the deployed network

setting packet-handling policies

Which command do you enter so that a switch configured with Rapid PVST + listens and learns for a specific time period?

switch(config)#spanning-tree vlan 1 forward-time 20

switch(config)#spanning-tree vlan 1 max-age 6

switch(config)#spanning-tree vlan 1 hello-time 10

switch(config)#spanning-tree vlan 1 priority 4096

switch(config)#spanning-tree vlan 1 forward-time 20

Refer to the exhibit. The network administrator must prevent the switch Cat9K-2 IP address from being visible in LLDP without disabling the protocol. Which action must be taken must be taken to complete the task?

Configure the no lldp tlv-select-management-address command globally on Cat9K-2

Configure the no lldp transmit command on interface G1/0/21 in Cat9K-1

Configure the no lldp receive command on interface G1/0/21 on Cat9K-1

Configure the no lldp mac-phy-cfg command globally on Cat9K-2

What are the two steps an engineer must take to provide the highest encryption and authentication using domain credentials from LDAP?

Select WPA+WPA2 on Layer 2 Security

Select 802.1X from under Authentication Key Management

Select PSK under Authentication Key Management

Select WPA+WPA2 on Layer 2 Security

Select Static-WEP + 802.1X on Layer 2 Security

Select WPA Policy with TKIP Encryption

Select 802.1X from under Authentication Key Management

Refer to the exhibit. IP connectivity between the three routers is configured. OSPF adjacencies must be established.

Configure R1 and R2 Router IDs using the interface IP addresses from the link that is shared between them.

Configure the R2 links with a max value facing R1 and R3. R2 must become the DR. R1 and R3 links facing R2 must remain with the default OSPF configuration for DR election. Verify the configuration after clearing the OSPF process.

Using a host wildcard mask, configure all three routers to advertise their respective Loopback1 networks.

Configure the link between R1 and R3 to disable their ability to add other OSPF routers.

Physical connectivity is implemented between the two Layer 2 switches, and the network connectivity between them must be configured

Configure an LACP EtherChannel and number it as 1; configure it between switches SW1 and SVV2 using interfaces Ethernet0/0 and Ethernet0/1 on both sides. The LACP mode must match on both ends2 Configure the EtherChannel as a trunk link.

Configure the trunk link with 802.1 q tags.

Configure the native VLAN of the EtherChannel as VLAN 15.

Configure IPv4 and IPv6 connectivity between two routers. For IPv4, use a /28 network from the 192.168.1.0/24 private range. For IPv6, use the first /64 subnet from the 2001:0db8:aaaa::/48 subnet.

Using Ethernet0/1 on routers R1 and R2, configure the next usable/28 from the 192.168.1.0/24 range. The network 192.168.1.0/28 is unavailable.

For the IPv4 /28 subnet, router R1 must be configured with the first usable host address.

For the IPv4 /28 subnet, router R2 must be configured with the last usable host address.

For the IPv6 /64 subnet, configure the routers with the IP addressing provided from the topology.

A ping must work between the routers on the IPv4 and IPv6 address ranges.

Connectivity between four routers has been established. IP connectivity must be configured in the order presented to complete the implementation. No dynamic routing protocols are included.

Configure static routing using host routes to establish connectivity from router R3 to the router R1 Loopback address using the source IP of 209.165.200.230.

Configure an IPv4 default route on router R2 destined for router R4.

Configure an IPv6 default router on router R2 destined for router R4.

All physical cabling between the two switches is installed. Configure the network connectivity between the switches using the designated VLANs and interfaces.

Configure VLAN 100 named Compute and VLAN 200 named Telephony where required for each task.

Configure Ethernet0/1 on SW2 to use the existing VLAN named Available.

Configure the connection between the switches using access ports.

Configure Ethernet0/1 on SW1 using data and voice VLANs.

Configure Ethemet0/1 on SW2 so that the Cisco proprietary neighbor discovery protocol is turned off for the designated interface only.

Refer to the exhibit. Three switches must be configured for Layer 2 connectivity. The company requires only the designated VLANs to be configured on their respective switches and permitted accross any links between switches for security purposes. Do not modify or delete VTP configurations.The network needs two user-defined VLANs configured:VLAN 110: MARKETINGVLAN 210: FINANCE

Configure the VLANs on the designated switches and assign them as access ports to the interfaces connected to the PCs.

Configure the e0/2 interfaces on Sw1 and Sw2 as 802.1q trunks with only the required VLANs permitted.

Configure the e0/3 interfaces on Sw2 and Sw3 as 802.1q trunks with only the required VLANs permitted.

An engineer must configure neighbor discovery between the company router and an ISP What is the next step to complete the configuration if the ISP uses a third-party router?

Enable LLDP TLVs on the ISP router.

Cisco 200-301 Practice Test 16 - Free Online Exam Prep & Questions

Refer to the exhibit.

Cisco 200-301 image Question 501 110009 10072024004421000000

Packets received by the router from BGP enter via a serial interface at 209.165.201.10. Each route is present within the routing table. Which interface is used to forward traffic with a destination IP of 10.10.10.24?

Become a Premium Member for full access

Unlock Premium Member

Cisco 200-301 Practice Test 16

Question

Cisco 200-301 Practice Tests

Practice Tests