Which two capabilities of Cisco DNA Center make it more extensible as compared to traditional campus device management? (Choose two.)

REST APIs that allow for external applications to interact natively

SDKs that support interaction with third-party network equipment

REST APIs that allow for external applications to interact natively

adapters that support all families of Cisco IOS software

SDKs that support interaction with third-party network equipment

customized versions for small, medium, and large enterprises

modular design that is upgradable as needed

Refer to the exhibit. The SW1 and SW2 Gi0/0 ports have been preconfigured. An engineer is given these requirements:* Allow all PCs to communicate with each other at Layer 3.* Configure untagged traffic to use VLAN 5.* Disable VLAN 1 from being used.Which configuration set meets these requirements?

SW#1 - interface Gi0/1 switchport mode trunk switchport trunk allowed vlan 5,7,9,108 switchport trunk native vlan 5 interface Gi0/2 switchport mode trunk switchport trunk allowed vlan 5,7,9,108 SW2# interface Gi0/1 switchport mode access switchport access vlan 7 interface Gi0/7 switchport mode trunk switchport trunk allowed vlan 5,7,9,108 switchport trunk native vlan 5

SW1# interface Gi0/1 switchport mode trunk switchport trunk allowed vlan 5,7,9,108 switchport trunk native vlan 5 interface Gi0/2 switchport mode trunk switchport trunk allowed vlan 5,7,9,108 SW2# interface Gi0/1 switchport mode access switchport access vlan 7 interface Gi0/7 switchport mode trunk switchport trunk allowed vlan 7,9,108

SW1# interface Gi0/1 switchport mode trunk switchport trunk allowed vlan 5,7,9,108 switchport trunk native vlan 5 interface Gi0/2 switchport mode access switchport trunk allowed vlan 7,9,108 SW2# interface Gi0/1 switchport mode access no switchport access vlan 1 switchport access vlan 7 interface Gi0/7 switchport mode trunk switchport trunk allowed vlan 7,9,108 switchport trunk native vlan 5

SW#1 - interface Gi0/1 switchport mode trunk switchport trunk allowed vlan 5,7,9,108 switchport trunk native vlan 5 interface Gi0/2 switchport mode trunk switchport trunk allowed vlan 5,7,9,108 SW2# interface Gi0/1 switchport mode access switchport access vlan 7 interface Gi0/7 switchport mode trunk switchport trunk allowed vlan 5,7,9,108 switchport trunk native vlan 5

SW1# interface Gi0/1 switchport mode trunk switchport trunk allowed vian 5,7,9,108 interface Gi0/2 switchport mode trunk switchport trunk allowed vlan 7,9,108 SW2# interface Gi0/1 switchport mode trunk switchport trunk allowed vlan 7 interface Gi0/7 switchport mode trunk switchport trunk allowed vlan 5,7,9,108

What should a network administrator consider when deciding to implement automation?

Manual changes frequently lead to configuration errors and inconsistencies.

Automated systems may have difficulty expanding network changes at scale.

Network automation typically is limited to the configuration and management of virtual devices within a network.

Network automation typically increases enterprise management operating costs.

Manual changes frequently lead to configuration errors and inconsistencies.

Which capability does TFTP provide?

loads configuration files on systems without data storage devices

provides authentication for data communications over a private data network

provides encryption mechanisms for file transfer across a WAN

provides secure file access within the LAN

A network architect is deciding whether to implement Cisco autonomous access points or lightweight access points. Which fact about firmware updates must the architect consider? Unlike lightweight access points, which require

Unlike autonomous access points, lightweight access points require a WLC to implement remote firmware updates.

Unlike lightweight access points, which require redundant WLCs to support firmware upgrades, autonomous access points require only one WLC.

Unlike autonomous access points, lightweight access points store a complete copy of the current firmware for backup.

Unlike lightweight access points, autonomous access points can recover automatically from a corrupt firmware update.

Unlike autonomous access points, lightweight access points require a WLC to implement remote firmware updates.

How does IPsec provide secure networking for applications within an organization?

It enables sets of security associations between peers.

It takes advantage of FTP to secure file transfers between nodes on the network.

It provides GRE tunnels to transmit traffic securely between network nodes.

It enables sets of security associations between peers.

It leverages TFTP providing secure file transfers among peers on the network.

What are two functions of DHCP servers? (Choose two.)

assign dynamic IP configurations to hosts in a network

support centralized IP management

prevent users from assigning their own IP addresses to hosts

assign dynamic IP configurations to hosts in a network

support centralized IP management

issue DHCPDISCOVER messages when added to the network

respond to client DHCPOFFER requests by issuing an IP address

It work security team noticed that an increasing number of employees are becoming victims of phishing attacks. Which security program should be implemented to mitigate the problem?

software firewall enabled on all PCs

What does WPA3 provide in wireless networking?

safeguards against brute force attacks with SAE

optional Protected Management Frame negotiation

backward compatibility with WPAand WPA2

increased security and requirement of a complex configuration

What is the operating mode and role of a backup port on a shared LAN segment in Rapid PVST+?

blocking mode and provides an alternate path toward the designated bridge

forwarding mode and provides the lowest-cost path to the root bridge for each VLAN

learning mode and provides the shortest path toward the root bridge handling traffic away from the LAN

blocking mode and provides an alternate path toward the designated bridge

listening mode and provides an alternate path toward the root bridge

What must be considered before deploying virtual machines?

resource limitations, such as the number of CPU cores and the amount of memory

location of the virtual machines within the data center environment

whether to leverage VSM to map multiple virtual processors to two or more virtual machines

resource limitations, such as the number of CPU cores and the amount of memory

support for physical peripherals, such as monitors, keyboards, and mice

What is a reason why an administrator would choose to implement an automated network management approach?

Reduce inconsistencies in the network configuration.

Enable 'box by box' configuration and deployment.

Decipher simple password policies.

Increase recurrent management costs.

Refer to the exhibit. A network engineer configures the CCNA WLAN so that clients must authenticate hourly and to limit the number of simultaneous connections to the WLAN to Which two actions complete this configuration? (Choose two.)

Enable the Enable Session Timeout option and set the value to 3600.

Set the Maximum Allowed Clients value to 10.

Enable the Enable Session Timeout option and set the value to 3600.

Set the Maximum Allowed Clients value to 10.

Enable the Client Exclusion option and set the value to 3600.

Enable the Wi-Fi Direct Clients Policy option.

Set the Maximum Allowed Clients Per AP Radio value to 10.

Company has decided to require multifactor authentication for all systems. Which set of parameters meets the requirement?

personal 10-digit PIN and RSA certificate

complex password and personal 10-digit PIN

password of 8 to 15 characters and personal 12-digit PIN

fingerprint scanning and facial recognition

How do traditional campus device management and Cisco DNA Center device management differ in regards to deployment?

Cisco DNA Center device management deploys a network faster than traditional campus device management.

Traditional campus device management schemes typically deploy patches and updates quicker than Cisco DNA Center device management.

Cisco DNA Center device management is implemented at a lower cost than most traditional campus device management options.

Traditional campus device management allows a network to scale quicker than using Cisco DNA Center device management.

Cisco DNA Center device management deploys a network faster than traditional campus device management.

What are two reasons to implement DHCP in a network? (Choose two.)

dynamic control over the best path to reach an IP address

access a website by name instead of by IP address

reduce administration time in managing IP address ranges for clients

control the length of time an IP address is used by a network device

manually control and configure IP addresses on network devices

dynamic control over the best path to reach an IP address

access a website by name instead of by IP address

What does traffic shaping do?

It modifies the QoS attributes of a packet

It organizes traffic into classes.

It sets QoS attributes within a packet.

Which enhancements were implemented as part of WPA3?

forward secrecy and SAE in personal mode for secure initial key exchange

802.1x authentication and AES-128 encryption

TKIP encryption improving WEP and per-packet keying

AES-64 m personal mode and AES-128 in enterprise mode

forward secrecy and SAE in personal mode for secure initial key exchange

How is noise defined in Wi-Fi?

ratio of signal-to-noise rating supplied by the wireless device

signals from other Wi-Fi networks that interfere with the local signal

measured difference between the desired Wi-Fi signal and an interfering Wi-Fi signal

any interference that is not Wi-Fi traffic that degrades the desired signal

What is the difference between an IPv6 link-local address and a unique local address?

The scope of an IPv6 link-local address can be used throughout a company site or network, but an IPv6 unique local address is limited to a loopback address.

The scope of an IPv6 link-local address is limited to a loopback address, and an IPv6 unique local address is limited to a directly attached interface.

The scope of an IPv6 link-local address can be used throughout a company site or network, but an IPv6 unique local address is limited to a loopback address.

The scope of an IPv6 link-local address is global, but the scope of an IPv6 unique local address is limited to a loopback address.

The scope of an IPv6 link-local address is limited to a directly attached interface, but an IPv6 unique local address is used throughout a company site or network.

What is a difference between an IPv6 multicast address and an IPv6 anycast address?

A packet sent to an IPv6 multicast address is delivered to one or more destinations at once, but a packet sent to an IPv6 anycast address is routed to the closest interface with that address.

An IPv6 multicast address uses the prefix 2002::/15 and forwards to one destination, and an IPv6 anycast address uses the prefix ff00::/8 and forwards to any destination in a group.

IPv6 multicast addresses are used to transition from IPv4 to IPv6, and IPv6 anycast addresses are used for address aggregation in an IPv6-only environment.

An IPv6 multicast address is assigned to numerous interfaces within a subnet, but an IPv6 anycast address is used for a predefined group of nodes in an all-IPv6 routers group.

How is a configuration change made to a wireless AP in lightweight mode?

CAPWAP/LWAPP connection via the parent WLC

SSH connection to the management IP of the AP

EolP connection via the parent WLC

CAPWAP/LWAPP connection via the parent WLC

HTTPS connection directly to the out-of-band address of the AP

Refer to the exhibit. What is missing from this output for it to be executed?

double quotes C') around the 'Cisco Devices' string

exclamation point (!) at the beginning of each line

square bracket ([) at the beginning

Refer to the exhibit. Which action must be taken so that neighbofing devices rapidly discover switch Cat9300?

Configure the cdp timer 10 command on switch Cat9300.

Enable portfast on the ports that connect to neighboring devices.

Configure the cdp holdtime 10 command on switch Cat9300.

Configure the cdp timer 10 command on the neighbors of switch Cat9300.

A network engineer starts to implement a new wireless LAN by configuring the authentication server and creating the dynamic Interface. What must be performed next to complete the basic configuration?

Create the new WLAN and bind the dynamic interface to It.

Install the management interface and add the management IP.

Configure high availability and redundancy tor the access points.

Enable Telnet and RADIUS access on the management interface.

Create the new WLAN and bind the dynamic interface to It.

What are two reasons lo configure PortFast on a switch port attached to an end host? (Choose two.)

to protect the operation of the port from topology change processes

to enable the pod to enter the forwarding state immediately when the host boots up

to enable the number of MAC addresses learned on the port to l

to protect the operation of the port from topology change processes

to enable the pod to enter the forwarding state immediately when the host boots up

to prevent the port from participating in Spanning Tree Protocol operations

to block another switch or host from communicating through the port

Which action must be taken when password protection is Implemented?

Share passwords with senior IT management to ensure proper oversight.

Use less than eight characters in length when passwords are complex.

Store passwords as contacts on a mobile device with single-factor authentication.

Include special characters and make passwords as long as allowed.

Share passwords with senior IT management to ensure proper oversight.

Cisco 200-301 Practice Test 24 - Free Online Exam Questions 921-960

Spam

Selling illegal goods, money scams etc.

Hate Speech

Serious attack on a group.

Harassment and bullying

Harassing an individual (including doxing)

Harmful activities

Threatening or glorifying violence or serious harm, including self-harm

Adult content (Consensual)

Nudity/Sexual content

Sexual exploitation and abuse (child safety)

Sexually explicit or suggestive imagery or writing involving minors

Sexual exploitation and abuse (adults and animals)

Sexually explicit or suggestive imagery or writing involving non-consenting adults or non-humans

Plagiarism

Reusing content without attribution (link and blockquotes)

Poorly written

Not in English or has very bad formatting, grammar, and spelling

Inappropriate credential

Author's credential is offensive, spam, or impersonation

Other

Ex. Illegal content, incomplete question...

Cisco 200-301 Practice Test 24

Question

Cisco 200-301 Practice Tests

Practice Tests