View Full Cisco 200-301 Exam Dumps and Practice Test Dumps.
Question 321
Which IPv4 subnet contains the host address 192.168.100.75/27?
- 192.168.100.0/27
- 192.168.100.32/27
- 192.168.100.64/27
- 192.168.100.96/27
Correct Answer: 3
Explanation
A /27 subnet has 32 addresses per block. The subnet ranges in the last octet are 0–31, 32–63, 64–95, and 96–127. Because 192.168.100.75 falls between 64 and 95, it belongs to the 192.168.100.64/27 subnet. In this subnet, 192.168.100.64 is the network address, 192.168.100.95 is the broadcast address, and addresses from 192.168.100.65 through 192.168.100.94 are usable host addresses.
Question 322
Which command enables IPv6 routing on a Cisco router?
- ipv6 unicast-routing
- ipv6 routing enable
- ip routing ipv6
- enable ipv6 routing
Correct Answer: 1
Explanation
The ipv6 unicast-routing command enables IPv6 packet forwarding on a Cisco router. Without this command, the router can have IPv6 addresses configured on interfaces but will not function as an IPv6 router between networks. After IPv6 routing is enabled, the router can forward IPv6 packets and participate in IPv6 routing protocols. Commands such as ipv6 address configure IPv6 addresses on interfaces, but they do not independently enable Layer 3 IPv6 forwarding throughout the router.
Question 323
Which type of IPv4 address is used to identify a single destination host?
- Broadcast
- Unicast
- Multicast
- Anycast
Correct Answer: 2
Explanation
A unicast IPv4 address identifies a single destination interface or host. When a packet is sent using a unicast address, it is intended for one specific destination. Broadcast communication sends traffic to all applicable hosts within a broadcast domain, while multicast sends traffic to a selected group of receivers. Anycast is primarily associated with IPv6 addressing concepts. Unicast communication is the most common type of IP traffic because ordinary client-to-server communication generally involves one source communicating with one specific destination.
Question 324
What is the main purpose of a default route on a router?
- To provide a route to directly connected networks
- To identify the OSPF area
- To forward traffic when no more specific route exists
- To assign addresses to hosts
Correct Answer: 3
Explanation
A default route provides a fallback path for packets when the routing table does not contain a more specific route to the destination network. In IPv4, the default route is represented as 0.0.0.0/0. It is commonly used to send traffic toward an upstream router or Internet service provider. The router first looks for the most specific matching route. If no suitable specific route exists, the default route can be selected, assuming one is present and usable.
Question 325
Which command displays the IP address, status, and protocol state of Cisco router interfaces in a concise format?
- show interfaces
- show ip interface brief
- show ip route
- show controllers
Correct Answer: 2
Explanation
The show ip interface brief command provides a concise summary of router interfaces. It displays interface names, assigned IP addresses, and the Status and Protocol fields. This makes it particularly useful during troubleshooting because an administrator can quickly determine whether interfaces are administratively enabled and whether their protocols are operational. The show interfaces command provides much more detailed information, while show ip route displays routing information. Therefore, show ip interface brief is generally the fastest command for obtaining a basic interface status overview.
Question 326
Which protocol is responsible for translating an IPv4 address into a MAC address on a local network?
- ARP
- DNS
- DHCP
- NTP
Correct Answer: 1
Explanation
Address Resolution Protocol, or ARP, maps an IPv4 address to a MAC address on a local Ethernet network. When a host knows the destination IPv4 address but does not know its corresponding MAC address, it sends an ARP request as a broadcast. The device owning that IPv4 address responds with its MAC address, allowing the sender to construct the Ethernet frame. DNS resolves names to IP addresses, DHCP provides network configuration, and NTP synchronizes device clocks.
Question 327
Which VLAN is typically used to carry voice traffic from an IP phone?
- Native VLAN
- Management VLAN
- Voice VLAN
- Default VLAN only
Correct Answer: 3
Explanation
A voice VLAN is specifically configured to carry IP phone traffic separately from ordinary data traffic. Cisco switches can assign a voice VLAN to an access port so that an IP phone can send voice traffic using the designated VLAN while a connected computer can use a separate data VLAN. Voice VLANs help simplify traffic separation and allow network administrators to apply appropriate quality-of-service policies. The management VLAN is intended for device management, while the native VLAN carries untagged traffic on an 802.1Q trunk.
Question 328
Which protocol is commonly used to provide secure remote CLI access to a Cisco device?
- Telnet
- FTP
- SSH
- TFTP
Correct Answer: 3
Explanation
Secure Shell, or SSH, provides encrypted remote command-line access to Cisco network devices. It protects authentication credentials and management traffic from being transmitted in plain text. SSH commonly uses TCP port 22. Telnet can also provide remote CLI access, but it sends information without encryption and is therefore less secure. FTP and TFTP are primarily file-transfer protocols rather than remote management protocols. For secure network administration, SSH is the preferred remote-access method.
Question 329
What does the administrative distance of a routing protocol primarily indicate?
- The reliability of a route source
- The bandwidth of the interface
- The number of hops to a destination
- The packet size supported by the route
Correct Answer: 1
Explanation
Administrative distance indicates how trustworthy a routing source is when a router learns multiple routes to the same destination from different sources. A lower administrative distance is preferred over a higher value. For example, a directly connected route has an administrative distance of 0, while a static route normally has an administrative distance of 1. Administrative distance is different from a routing protocol metric, which is used to select the best route within a particular routing protocol.
Question 330
Which IPv6 address prefix identifies unique local addresses?
- FC00::/7
- FE80::/10
- FF00::/8
- 2000::/3
Correct Answer: 1
Explanation
IPv6 unique local addresses use the FC00::/7 prefix. These addresses are designed for private internal communication and are not intended to be globally routed across the public Internet. Link-local addresses use FE80::/10 and are limited to the local network segment. Multicast addresses use FF00::/8, while 2000::/3 is commonly associated with global unicast addresses. Unique local addressing provides an IPv6 equivalent of private addressing for internal networks without depending on globally routable addresses.
Question 331
Which command saves the current running configuration to NVRAM on a Cisco device?
- copy startup-config running-config
- write erase
- copy running-config startup-config
- erase startup-config
Correct Answer: 3
Explanation
The copy running-config startup-config command saves the current active configuration to the startup configuration stored in NVRAM. This ensures that configuration changes remain available after the device is rebooted. The running configuration exists in RAM and contains the currently active settings. The startup configuration is loaded during boot. Copying startup-config to running-config performs the opposite operation, while erase startup-config removes the saved configuration. Regularly saving important configuration changes helps prevent accidental loss after a reload or power interruption.
Question 332
Which protocol allows a Cisco router to automatically obtain an IPv4 address from a DHCP server?
- DHCP
- ARP
- ICMP
- OSPF
Correct Answer: 1
Explanation
Dynamic Host Configuration Protocol, or DHCP, can automatically provide an IPv4 address and other network parameters to a device. A Cisco router interface configured with ip address dhcp acts as a DHCP client and requests an address from a DHCP server. DHCP can also provide information such as the subnet mask, default gateway, and DNS server. ARP resolves IPv4 addresses to MAC addresses, ICMP supports diagnostic and control functions, and OSPF is a dynamic routing protocol.
Question 333
Which wireless security method uses a pre-shared key for client authentication?
- WPA2-Enterprise
- 802.1X
- WPA2-Personal
- TACACS+
Correct Answer: 3
Explanation
WPA2-Personal uses a pre-shared key, commonly called a PSK, to authenticate wireless clients. The same configured password or passphrase is shared among authorized users and the wireless network. WPA2-Enterprise instead uses an authentication framework such as 802.1X and typically a RADIUS server for individual user authentication. TACACS+ is primarily used for network device administrative access rather than ordinary Wi-Fi client authentication. WPA2-Personal is commonly used in smaller environments where centralized user authentication is unnecessary.
Question 334
Which Layer 2 technology prevents switching loops by placing redundant paths into a blocking state?
- DHCP Snooping
- Spanning Tree Protocol
- Port Security
- NAT
Correct Answer: 2
Explanation
Spanning Tree Protocol, or STP, prevents Layer 2 switching loops by logically blocking redundant paths while keeping them available as backup paths. Without STP, redundant switch connections can create broadcast storms, duplicate frames, and MAC address instability. STP elects a root bridge and calculates appropriate paths through the Layer 2 topology. If an active path fails, STP can allow an alternate path to become active. DHCP Snooping and Port Security provide security functions, while NAT operates at Layer 3.
Question 335
Which protocol is used by network devices to send event and error messages to a centralized logging server?
- SNMP
- NTP
- Syslog
- TFTP
Correct Answer: 3
Explanation
Syslog is used to send system messages, event notifications, warnings, and error information from network devices to a centralized logging server. Centralized logging allows administrators to review events from multiple routers, switches, firewalls, and other systems in one location. Syslog messages can have different severity levels, helping administrators identify the importance of events. SNMP is primarily used for monitoring and management, NTP synchronizes time, and TFTP provides simple file transfers.
Question 336
Which TCP port is normally used by HTTPS?
- 443
- 80
- 22
- 53
Correct Answer: 1
Explanation
HTTPS normally uses TCP port 443 to provide secure web communication. HTTPS combines HTTP with TLS encryption, helping protect data exchanged between clients and web servers. Standard HTTP commonly uses TCP port 80 without TLS encryption. SSH uses TCP port 22, while DNS commonly uses UDP port 53 for standard queries. Knowing common TCP and UDP ports helps network administrators troubleshoot connectivity, configure ACLs, and understand which services are operating on a network.
Question 337
Which command can be used to verify the MAC addresses learned by a Cisco switch?
- show ip route
- show vlan brief
- show mac address-table
- show interfaces trunk
Correct Answer: 3
Explanation
The show mac address-table command displays MAC addresses learned by a Cisco switch and associates them with switch interfaces and VLANs. Switches dynamically learn source MAC addresses from incoming Ethernet frames and store them in the MAC address table. This information allows the switch to forward frames efficiently toward the appropriate port instead of flooding every frame. The show ip route command displays Layer 3 routes, while show vlan brief displays VLAN information rather than individual learned MAC addresses.
Question 338
Which routing protocol uses the shortest-path-first algorithm to calculate routes?
- RIP
- OSPF
- BGP
- DHCP
Correct Answer: 2
Explanation
Open Shortest Path First, or OSPF, is a link-state routing protocol that uses the Shortest Path First algorithm, based on Dijkstra’s algorithm, to calculate routes. OSPF routers exchange link-state information and build a topology database representing the network. They then calculate the shortest paths based on OSPF cost. RIP uses a distance-vector approach and hop count, while BGP is a path-vector protocol designed primarily for inter-autonomous-system routing. DHCP is not a routing protocol at all.
Question 339
What is the primary function of DHCP Snooping on a Cisco switch?
- Encrypt DHCP messages
- Prevent unauthorized DHCP servers from serving clients
- Assign static IP addresses
- Replace the DHCP server
Correct Answer: 2
Explanation
DHCP Snooping is a Layer 2 security feature that helps protect networks against unauthorized or rogue DHCP servers. The switch classifies ports as trusted or untrusted. DHCP server responses are normally allowed only through trusted ports, while unauthorized DHCP server messages arriving on untrusted ports can be blocked. DHCP Snooping also creates a binding database containing information such as client MAC addresses, IP addresses, VLANs, and interfaces. This database can support additional security features such as Dynamic ARP Inspection.
Question 340
Which IPv6 multicast address identifies all IPv6 nodes on the local link?
- FF02::1
- FF02::2
- FF05::1
- FE80::1
Correct Answer: 1
Explanation
The IPv6 multicast address FF02::1 represents all IPv6 nodes on the local link. IPv6 devices listen for traffic sent to this multicast group when appropriate. FF02::2 represents all IPv6 routers on the local link. The FF02 prefix indicates link-local multicast scope, while FE80::/10 is used for unicast link-local addresses rather than multicast. IPv6 does not use traditional broadcast addresses, so multicast groups such as FF02::1 provide functionality that would otherwise commonly rely on local broadcast traffic in IPv4.