View Full Cisco 200-301 Exam Dumps and Practice Test Dumps.

 

Question 341

Which subnet mask provides 14 usable host addresses?

1. 255.255.255.240
2. 255.255.255.224
3. 255.255.255.248
4. 255.255.255.192

Correct Answer: 1

Explanation

A subnet requiring 14 usable IPv4 host addresses needs 4 host bits because 2⁴ provides 16 total addresses. Two addresses are reserved for the network and broadcast addresses, leaving 14 usable host addresses. A /28 prefix provides this capacity, and its dotted-decimal subnet mask is 255.255.255.240. A /27 provides 30 usable addresses, while /29 provides only 6. Therefore, 255.255.255.240 is the appropriate subnet mask for a network requiring up to 14 usable host addresses.

Question 342

Which protocol is commonly used to securely manage a Cisco network device through a command-line interface?

1. TFTP
2. SSH
3. FTP
4. SNMP

Correct Answer: 2

Explanation

Secure Shell, or SSH, provides encrypted remote command-line access to Cisco routers and switches. It protects usernames, passwords, commands, and other management information from being transmitted in plain text. SSH normally operates over TCP port 22. TFTP and FTP are primarily file-transfer protocols, while SNMP is commonly used for network monitoring and management rather than interactive CLI access. Because SSH provides confidentiality and authentication, it is preferred over insecure remote-management protocols such as Telnet.

Question 343

What is the purpose of the native VLAN on an IEEE 802.1Q trunk?

1. To carry only management traffic
2. To carry only voice traffic
3. To carry untagged frames
4. To disable VLAN tagging completely

Correct Answer: 3

Explanation

The native VLAN on an IEEE 802.1Q trunk is used to carry untagged Ethernet frames. Most traffic crossing an 802.1Q trunk is tagged with a VLAN identifier, but frames belonging to the native VLAN are transmitted without an 802.1Q tag. Both ends of a trunk should normally be configured with the same native VLAN to avoid connectivity problems and security risks. The native VLAN is not restricted to management or voice traffic, and configuring it does not disable VLAN tagging for the entire trunk.

Question 344

Which routing table entry code represents a route learned through OSPF on a Cisco router?

1. O
2. C
3. S
4. L

Correct Answer: 1

Explanation

Cisco routing tables use codes to identify how routes were learned. The letter O represents an OSPF-learned route. C represents a directly connected network, S represents a static route, and L represents a local host route associated with an interface address. These codes help administrators quickly determine the source of a route when troubleshooting routing behavior. OSPF routes are dynamically learned from neighboring OSPF routers after adjacency formation and exchange of link-state information.

Question 345

Which command displays the VLANs configured on a Cisco switch and their assigned access ports?

1. show interfaces trunk
2. show vlan brief
3. show mac address-table
4. show spanning-tree

Correct Answer: 2

Explanation

The show vlan brief command displays a concise list of VLANs configured on a Cisco switch, including VLAN IDs, names, status, and access ports assigned to each VLAN. It is useful when verifying VLAN creation and access-port assignments. The show interfaces trunk command focuses on trunk interfaces and their VLAN information, while show mac address-table displays learned MAC addresses. The show spanning-tree command provides information about STP operation. Therefore, show vlan brief is the most appropriate command for viewing basic VLAN membership.

Question 346

Which protocol is responsible for automatically assigning IPv4 configuration information to clients?

1. DNS
2. ARP
3. DHCP
4. SNMP

Correct Answer: 3

Explanation

Dynamic Host Configuration Protocol, or DHCP, automatically provides clients with IPv4 configuration information. A DHCP server can assign an IP address, subnet mask, default gateway, DNS server information, and lease duration. This reduces the need for administrators to manually configure every host. DNS resolves names to IP addresses, ARP maps IPv4 addresses to MAC addresses on local networks, and SNMP supports network monitoring and management. DHCP is therefore the protocol responsible for automatically providing clients with standard IPv4 network configuration.

Question 347

Which Cisco feature can limit the number of MAC addresses learned on a switch port?

1. Port Security
2. DHCP Snooping
3. EtherChannel
4. DTP

Correct Answer: 1

Explanation

Port Security allows administrators to control which and how many MAC addresses can be associated with a switch port. This feature can help prevent unauthorized devices from connecting to a protected access port. An administrator can configure a maximum number of secure MAC addresses and specify actions for violations, such as restricting or shutting down the port. DHCP Snooping protects DHCP operations, EtherChannel combines physical links, and DTP negotiates trunking. Port Security is therefore the feature specifically designed for MAC-address control.

Question 348

Which IPv6 mechanism allows a host to automatically configure a global IPv6 address without using a DHCPv6 server for address assignment?

1. NAT
2. ARP
3. SLAAC
4. PAT

Correct Answer: 3

Explanation

Stateless Address Autoconfiguration, or SLAAC, allows an IPv6 host to automatically configure its address using information received from an IPv6 router. Router Advertisement messages provide the network prefix and other information needed by the host. The host can then generate an interface identifier and form its IPv6 address without requiring a DHCPv6 server to assign the address. IPv6 uses Neighbor Discovery Protocol rather than ARP, while NAT and PAT are primarily associated with IPv4 address translation.

Question 349

Which device typically serves as the default gateway for hosts in different VLANs when using router-on-a-stick?

1. Layer 2 switch
2. Router subinterface
3. Wireless access point
4. DHCP server

Correct Answer: 2

Explanation

In a router-on-a-stick configuration, a single physical router interface connects to a switch trunk and is divided into multiple logical subinterfaces. Each subinterface is configured with an IP address that serves as the default gateway for a particular VLAN. The router uses 802.1Q encapsulation to identify the VLAN associated with each subinterface. This approach allows a single physical router interface to provide inter-VLAN routing. A Layer 2 switch alone cannot route traffic between VLANs without a Layer 3 routing function.

Question 350

Which protocol uses UDP port 161 for network management queries?

1. NTP
2. DHCP
3. SNMP
4. Syslog

Correct Answer: 3

Explanation

Simple Network Management Protocol, or SNMP, commonly uses UDP port 161 for management queries and responses between an SNMP manager and an SNMP agent. SNMP can be used to monitor network devices and retrieve information such as interface statistics, CPU usage, and operational status. SNMP traps and informs commonly use UDP port 162. NTP uses UDP port 123, DHCP uses UDP ports 67 and 68, and traditional Syslog commonly uses UDP port 514. Knowing these ports assists with troubleshooting and ACL configuration.

Question 351

Which command displays detailed information about an OSPF neighbor relationship?

1. show ip ospf neighbor
2. show ip route ospf
3. show interfaces
4. show ip protocols

Correct Answer: 1

Explanation

The show ip ospf neighbor command displays information about OSPF neighbors discovered by the router. It can show the neighbor router ID, priority, state, dead timer, and the local interface used to reach the neighbor. This command is particularly useful when troubleshooting OSPF adjacency problems. The show ip route ospf command focuses on OSPF-learned routes, while show interfaces displays interface statistics and show ip protocols provides broader routing protocol information. Therefore, show ip ospf neighbor is the most direct command for examining OSPF neighbor relationships.

Question 352

Which protocol is used to synchronize clocks between network devices?

1. SNMP
2. NTP
3. DHCP
4. DNS

Correct Answer: 2

Explanation

Network Time Protocol, or NTP, synchronizes clocks between network devices and reliable time sources. Accurate time is important for troubleshooting, log correlation, authentication systems, security investigations, and many network services. NTP commonly uses UDP port 123. SNMP is used for monitoring and management, DHCP provides network configuration, and DNS resolves hostnames and domain names. By keeping routers, switches, servers, and other devices synchronized, NTP makes it easier to correlate events across an entire network.

Question 353

Which type of ACL checks both the source and destination IP addresses and can also filter protocols and port numbers?

1. Standard ACL
2. Extended ACL
3. MAC address table
4. Prefix list

Correct Answer: 2

Explanation

An extended ACL provides more detailed traffic filtering than a standard ACL. It can evaluate the source and destination IP addresses and can also filter based on protocols such as TCP, UDP, and ICMP. For TCP and UDP traffic, extended ACLs can additionally evaluate source and destination port numbers. Standard ACLs primarily filter based on the source IPv4 address. Because extended ACLs provide more granular control, they are commonly used when administrators need to permit or deny specific types of network traffic.

Question 354

Which technology allows multiple physical Ethernet links to operate as one logical link?

1. EtherChannel
2. NAT
3. VTP
4. Port Security

Correct Answer: 1

Explanation

EtherChannel combines multiple physical Ethernet interfaces into one logical link. This provides increased bandwidth and redundancy while simplifying Spanning Tree Protocol operation because STP views the bundle as a single logical connection. EtherChannel can be negotiated using protocols such as LACP or PAgP, or configured statically. NAT translates IP addresses, VTP distributes VLAN information in supported environments, and Port Security controls MAC addresses on switch ports. EtherChannel is therefore the technology designed to aggregate multiple physical links.

Question 355

Which address is the loopback address for IPv4?

1. 0.0.0.0
2. 169.254.1.1
3. 127.0.0.1
4. 255.255.255.255

Correct Answer: 3

Explanation

The IPv4 address 127.0.0.1 is the commonly used loopback address. It allows a host to send traffic to itself without sending the traffic onto the physical network. The entire 127.0.0.0/8 range is reserved for loopback purposes. The address 0.0.0.0 has special meanings depending on context, 169.254.0.0/16 is associated with IPv4 link-local addressing, and 255.255.255.255 is the limited broadcast address. Loopback testing is useful for verifying that the local TCP/IP stack is functioning correctly.

Question 356

Which routing protocol is classified as a path-vector protocol and is commonly used between autonomous systems?

1. OSPF
2. RIP
3. EIGRP
4. BGP

Correct Answer: 4

Explanation

Border Gateway Protocol, or BGP, is a path-vector routing protocol commonly used to exchange routing information between autonomous systems. It is the primary routing protocol used for Internet-scale inter-domain routing. BGP uses attributes and autonomous system path information to influence route selection and prevent routing loops. OSPF is a link-state protocol, RIP is a distance-vector protocol, and EIGRP is commonly described as an advanced distance-vector protocol. BGP is therefore the correct choice for inter-autonomous-system path-vector routing.

Question 357

Which command displays the current running configuration of a Cisco device?

1. show startup-config
2. show running-config
3. show version
4. show flash

Correct Answer: 2

Explanation

The show running-config command displays the configuration currently active in RAM. It allows administrators to review settings that are presently applied to the device, including interfaces, routing protocols, access lists, passwords, and other configuration parameters. The show startup-config command displays the configuration saved in NVRAM, which is used during boot. show version provides hardware, software, and system information, while show flash displays files stored in flash memory. The running configuration is especially important when verifying recent changes before saving them.

Question 358

Which wireless standard operates primarily in the 5 GHz band and is commonly known as Wi-Fi 5?

1. 802.11b
2. 802.11g
3. 802.11ac
4. 802.11a

Correct Answer: 3

Explanation

IEEE 802.11ac is commonly known as Wi-Fi 5 and operates primarily in the 5 GHz frequency band. It introduced improvements such as wider channels, higher data rates, and multi-user MIMO capabilities compared with earlier Wi-Fi generations. 802.11b and 802.11g primarily operate in the 2.4 GHz band, while 802.11a was an earlier 5 GHz standard. Wireless standards are important for understanding supported frequencies, performance, channel availability, and compatibility between wireless clients and access points.

Question 359

Which protocol can provide centralized authentication for network administrators using a client-server model?

1. RADIUS
2. ARP
3. NTP
4. ICMP

Correct Answer: 1

Explanation

RADIUS is an authentication, authorization, and accounting protocol commonly used to provide centralized access control. Network devices can forward administrator or user authentication requests to a RADIUS server rather than maintaining separate credentials locally. RADIUS is also widely used with wireless authentication and 802.1X deployments. ARP resolves IPv4 addresses to MAC addresses, NTP synchronizes time, and ICMP supports network control and diagnostic functions. Centralized authentication simplifies credential management and allows organizations to apply consistent access policies.

Question 360

What does the IPv4 prefix length /30 provide?

1. 2 usable host addresses
2. 6 usable host addresses
3. 14 usable host addresses
4. 30 usable host addresses

Correct Answer: 1

Explanation

An IPv4 /30 subnet contains 32 minus 30, or 2 host bits. Two host bits provide four total addresses. One address is reserved as the network address and another as the broadcast address, leaving two usable host addresses. The corresponding subnet mask is 255.255.255.252. /30 networks are commonly used for point-to-point connections where only two usable addresses are required. Larger prefixes such as /29, /28, and /27 provide six, fourteen, and thirty usable host addresses respectively.