View Full Cisco 200-301 Exam Dumps and Practice Test Dumps.

 

Question 361

Which command displays the IPv6 addresses configured on Cisco router interfaces in a concise format?

1. show ipv6 interface brief
2. show ip route
3. show interfaces status
4. show ipv6 route

Correct Answer: 1

Explanation

The show ipv6 interface brief command provides a concise summary of IPv6 addressing and interface status on a Cisco device. It displays interface names, assigned IPv6 addresses, and the status and protocol state of interfaces. This command is useful when quickly verifying IPv6 configuration and determining whether interfaces are operational. The show ipv6 route command displays IPv6 routing information instead, while show ip route focuses on IPv4 routes. Therefore, show ipv6 interface brief is the most appropriate command for a quick IPv6 interface overview.

Question 362

Which protocol is used by IPv6 hosts to discover neighboring devices and routers on the local network?

1. ARP
2. NDP
3. DHCP
4. DNS

Correct Answer: 2

Explanation

IPv6 uses Neighbor Discovery Protocol, or NDP, to perform functions that include discovering neighboring devices, discovering routers, resolving Layer 3 IPv6 addresses to Layer 2 MAC addresses, and checking address uniqueness. NDP uses ICMPv6 messages rather than ARP broadcasts. Router Solicitation and Router Advertisement messages help hosts discover routers, while Neighbor Solicitation and Neighbor Advertisement messages support neighbor resolution and other functions. ARP is used with IPv4, while DHCP and DNS provide different network services.

Question 363

Which command places a Cisco switch interface into access mode?

1. switchport mode trunk
2. switchport access vlan 10
3. switchport mode access
4. switchport nonegotiate

Correct Answer: 3

Explanation

The switchport mode access command configures a switch interface to operate as a Layer 2 access port. An access port normally carries traffic for a single VLAN and is commonly connected to end devices such as computers, printers, or IP phones. The switchport access vlan command can then assign the port to a specific VLAN. In contrast, switchport mode trunk configures a trunk capable of carrying multiple VLANs. Therefore, switchport mode access is the command used to explicitly configure an interface as an access port.

Question 364

Which protocol is commonly used to resolve a domain name into an IP address?

1. DNS
2. DHCP
3. ARP
4. SNMP

Correct Answer: 1

Explanation

Domain Name System, or DNS, translates human-readable domain names into IP addresses and can also perform other name-resolution functions. For example, when a user enters a website domain name, a DNS resolver can determine the corresponding IP address so the client can establish communication with the destination server. DHCP provides network configuration information, ARP resolves IPv4 addresses to MAC addresses on local networks, and SNMP is used for network management. DNS therefore provides the name-resolution service required for translating domain names into IP addresses.

Question 365

Which OSPF value is used to determine the preferred path through an OSPF network?

1. Hop count
2. Cost
3. Administrative distance
4. MAC address

Correct Answer: 2

Explanation

OSPF uses cost as its primary metric for selecting the best path to a destination. Cost is associated with interfaces and is generally influenced by the interface bandwidth. When multiple paths exist, OSPF calculates the total cost of each path and prefers the path with the lowest cumulative cost. Administrative distance is used to compare routes learned from different routing sources, while hop count is associated with protocols such as RIP. MAC addresses are Layer 2 identifiers and are not used as the OSPF path-selection metric.

Question 366

Which security feature can shut down a switch port when a security violation occurs?

1. Port Security
2. NTP
3. DHCP
4. EtherChannel

Correct Answer: 1

Explanation

Cisco Port Security can protect switch ports by limiting the MAC addresses allowed on an interface. When a configured security violation occurs, the switch can take different actions depending on the configured violation mode. The shutdown mode places the interface into an error-disabled state, effectively disabling the port until it is recovered. Other modes can restrict or protect traffic without completely shutting down the interface. NTP synchronizes clocks, DHCP assigns network settings, and EtherChannel aggregates physical links, so they do not provide this security function.

Question 367

Which IPv4 address range is reserved for private Class A addressing?

1. 172.16.0.0/12
2. 192.168.0.0/16
3. 10.0.0.0/8
4. 169.254.0.0/16

Correct Answer: 3

Explanation

The 10.0.0.0/8 range is reserved for private IPv4 addressing. It provides a large private address space for internal networks and is not directly routable across the public Internet. The other major RFC 1918 private ranges are 172.16.0.0/12 and 192.168.0.0/16. The 169.254.0.0/16 range is used for IPv4 link-local addressing when automatic configuration cannot obtain a normal address. Private addresses are commonly used inside organizations and may require NAT when communicating with public Internet destinations.

Question 368

Which command enables a Cisco router interface that has been administratively shut down?

1. shutdown
2. no shutdown
3. enable interface
4. interface enable

Correct Answer: 2

Explanation

The no shutdown command administratively enables a Cisco router or switch interface that has been placed in a shutdown state. An interface can be administratively disabled using the shutdown command. After entering interface configuration mode, an administrator can enter no shutdown to activate the interface. The physical and protocol status must still be operational for the interface to show an up/up state. The command is frequently used during initial interface configuration and troubleshooting when an interface has been unintentionally left administratively disabled.

Question 369

Which IPv6 address is used by routers to send Router Advertisement messages to all IPv6 nodes on the local link?

1. FF02::1
2. FF02::2
3. FE80::1
4. 2000::1

Correct Answer: 1

Explanation

FF02::1 is the IPv6 multicast address representing all nodes on the local link. Router Advertisement messages can be sent to this multicast group so that IPv6 hosts can receive information from routers. FF02::2 represents all IPv6 routers on the local link and is commonly used for router-directed multicast communication. FE80::/10 addresses are link-local unicast addresses, while 2000::/3 is used for global unicast addressing. IPv6 uses multicast rather than traditional broadcast mechanisms for these local communication functions.

Question 370

Which protocol provides loop prevention for redundant Layer 2 paths in a switched network?

1. STP
2. DHCP
3. DNS
4. NAT

Correct Answer: 1

Explanation

Spanning Tree Protocol, or STP, prevents Layer 2 loops when redundant paths exist between switches. STP elects a root bridge and calculates a loop-free topology by placing selected redundant interfaces into a blocking or alternate state. Without STP, redundant Layer 2 connections can cause broadcast storms, duplicate frames, and unstable MAC address tables. DHCP assigns host configuration, DNS resolves names, and NAT translates IP addresses. STP is specifically designed to provide loop prevention while preserving redundant paths for potential failover.

Question 371

Which command shows the interfaces currently configured as switch trunks?

1. show vlan brief
2. show interfaces trunk
3. show mac address-table
4. show spanning-tree

Correct Answer: 2

Explanation

The show interfaces trunk command displays information about trunk interfaces on a Cisco switch. It can show which interfaces are operating as trunks, the encapsulation being used, the native VLAN, and VLANs that are allowed or active on the trunk. This makes the command useful when troubleshooting VLAN connectivity between switches. The show vlan brief command focuses on VLANs and access ports, while show mac address-table displays learned MAC addresses. Therefore, show interfaces trunk is the most direct command for verifying trunk operation.

Question 372

Which protocol provides centralized authentication and authorization for network access while commonly using UDP ports 1812 and 1813?

1. RADIUS
2. TACACS+
3. SSH
4. SNMP

Correct Answer: 1

Explanation

RADIUS is a centralized AAA protocol commonly using UDP port 1812 for authentication and authorization and UDP port 1813 for accounting. It is widely used for network access, including wireless authentication and 802.1X deployments. TACACS+ is another AAA protocol, but it uses TCP and separates authentication, authorization, and accounting more distinctly. SSH provides secure remote management, while SNMP supports monitoring and management. RADIUS is therefore the protocol associated with UDP ports 1812 and 1813.

Question 373

Which type of NAT creates a permanent one-to-one mapping between a private IPv4 address and a public IPv4 address?

1. PAT
2. Dynamic NAT
3. Static NAT
4. NAT overload

Correct Answer: 3

Explanation

Static NAT creates a permanent one-to-one mapping between an inside local private IPv4 address and an inside global public IPv4 address. This is useful when an internal device, such as a server, needs to be consistently reachable using a specific public address. PAT, also called NAT overload, allows many private addresses to share one or a small number of public addresses by using different port numbers. Dynamic NAT creates temporary mappings from an address pool. Static NAT is therefore the correct choice for a permanent one-to-one mapping.

Question 374

Which protocol is commonly used to securely copy configuration files between network devices?

1. SCP
2. TFTP
3. FTP
4. DNS

Correct Answer: 1

Explanation

Secure Copy Protocol, or SCP, provides encrypted file transfers using SSH. Cisco devices can use SCP to securely transfer configuration files, software images, and other files between network devices and servers. Because SCP uses SSH, authentication and data transfer are protected from simple interception. TFTP provides basic file transfer without encryption, while traditional FTP does not provide the same security unless additional protection mechanisms are used. DNS performs name resolution and is unrelated to file transfers. SCP is therefore preferred when secure configuration or image transfers are required.

Question 375

Which device separates broadcast domains by default?

1. Hub
2. Layer 2 switch
3. Router
4. Repeater

Correct Answer: 3

Explanation

A router separates broadcast domains because routers do not normally forward Layer 2 broadcast frames between their interfaces. Each router interface represents a different Layer 3 network and therefore forms a separate broadcast domain. A traditional Layer 2 switch forwards broadcasts within the same VLAN, while a hub and repeater simply repeat signals and do not provide Layer 3 segmentation. Layer 3 switches can also separate broadcast domains when different VLAN interfaces or routing functions are configured.

Question 376

Which command displays the current IP routing table on a Cisco router?

1. show interfaces
2. show ip route
3. show arp
4. show version

Correct Answer: 2

Explanation

The show ip route command displays the IPv4 routing table on a Cisco router or Layer 3 device. It shows directly connected networks, static routes, dynamically learned routes, and other routing information. Each entry includes information that helps the router determine where packets should be forwarded. The show interfaces command provides interface statistics, show arp displays IPv4-to-MAC mappings, and show version provides system and software information. Therefore, show ip route is the standard command for examining the IPv4 routing table.

Question 377

Which IPv4 protocol is commonly used by the ping utility to test reachability?

1. TCP
2. UDP
3. ICMP
4. ARP

Correct Answer: 3

Explanation

The ping utility commonly uses Internet Control Message Protocol, or ICMP, to test IP connectivity. An IPv4 ping sends an ICMP Echo Request toward the destination, and a reachable destination normally responds with an ICMP Echo Reply. This allows administrators to determine whether a destination can be reached and measure response time. TCP and UDP are transport-layer protocols, while ARP resolves IPv4 addresses to MAC addresses on a local Ethernet segment. ICMP is therefore the protocol most directly associated with standard IPv4 ping operations.

Question 378

Which protocol uses UDP port 123 for time synchronization?

1. DNS
2. NTP
3. SNMP
4. DHCP

Correct Answer: 2

Explanation

Network Time Protocol, or NTP, commonly uses UDP port 123 to synchronize device clocks. NTP allows routers, switches, servers, and other network devices to obtain accurate time from configured time sources. Consistent time is important for security logs, troubleshooting, authentication, and event correlation. DNS commonly uses UDP port 53, SNMP uses UDP port 161 for queries, and DHCP uses UDP ports 67 and 68. Therefore, UDP port 123 is associated with NTP.

Question 379

Which command is used to enter global configuration mode on a Cisco device?

1. configure terminal
2. enable secret
3. interface gigabitEthernet 0/1
4. line console 0

Correct Answer: 1

Explanation

The configure terminal command moves a Cisco device from privileged EXEC mode into global configuration mode. Global configuration mode is used to make system-wide configuration changes, such as configuring routing protocols, hostnames, security settings, and interface parameters. The enable secret command configures a privileged EXEC password, while interface and line commands enter more specific configuration modes. An administrator normally reaches global configuration mode by first entering privileged EXEC mode and then using configure terminal.

Question 380

Which IPv4 subnet contains the address 10.20.30.130/26?

1. 10.20.30.0/26
2. 10.20.30.64/26
3. 10.20.30.128/26
4. 10.20.30.192/26

Correct Answer: 3

Explanation

A /26 subnet contains 64 addresses per block. The subnet ranges in the final octet are 0–63, 64–127, 128–191, and 192–255. Since 10.20.30.130 falls between 128 and 191, it belongs to the 10.20.30.128/26 subnet. The network address is 10.20.30.128, the broadcast address is 10.20.30.191, and usable host addresses range from 10.20.30.129 through 10.20.30.190. Therefore, 10.20.30.128/26 is the correct subnet.