View Full Cisco 200-301 Exam Dumps and Practice Test Dumps.

 

Question 381

Which security control is designed to prevent unauthorized users from accessing a restricted physical area?

1. Badge reader
2. Load balancer
3. Proxy server
4. SIEM

Correct Answer: 1

Explanation

A badge reader is a physical access control that verifies an individual’s credentials before allowing entry into a restricted area. It can use identification cards, key fobs, or other authorized credentials to control access to facilities containing network equipment. Load balancers distribute network traffic, proxy servers act as intermediaries for network communication, and SIEM platforms collect and analyze security events. Physical security is an important part of network protection because unauthorized physical access can allow attackers to tamper with switches, routers, servers, or cabling.

Question 382

Which command displays the MAC address table on a Cisco switch?

1. show ip route
2. show vlan brief
3. show mac address-table
4. show interfaces trunk

Correct Answer: 3

Explanation

The show mac address-table command displays the MAC addresses learned by a Cisco switch. The output can include the VLAN associated with each MAC address, the MAC address itself, and the switch interface where the address was learned. Switches use this table to make forwarding decisions for Ethernet frames. The show ip route command displays Layer 3 routing information, while show vlan brief displays VLAN information. The show interfaces trunk command focuses specifically on trunk interfaces and their VLAN configuration.

Question 383

Which IPv4 address range is reserved for Automatic Private IP Addressing (APIPA)?

1. 127.0.0.0/8
2. 169.254.0.0/16
3. 172.16.0.0/12
4. 192.168.0.0/16

Correct Answer: 2

Explanation

The IPv4 range 169.254.0.0/16 is reserved for link-local addressing, commonly called APIPA in many host operating systems. A host may automatically assign itself an address from this range when it is configured to use DHCP but cannot obtain a valid address from a DHCP server. APIPA addresses allow limited communication on the local network but are not normally routed across routers. The 172.16.0.0/12 and 192.168.0.0/16 ranges are private IPv4 ranges, while 127.0.0.0/8 is reserved for loopback.

Question 384

Which protocol allows network devices to discover directly connected Cisco devices and obtain information about them?

1. CDP
2. DHCP
3. FTP
4. NTP

Correct Answer: 1

Explanation

Cisco Discovery Protocol, or CDP, is a Cisco proprietary Layer 2 discovery protocol that allows Cisco devices to learn information about directly connected Cisco neighbors. CDP can provide details such as the neighboring device name, platform, interface, and IP address. It is useful for network topology discovery and troubleshooting. DHCP assigns network configuration, FTP transfers files, and NTP synchronizes clocks. CDP operates without requiring an IP address on the local connection, making it useful for discovering directly connected Cisco equipment.

Question 385

Which OSPF packet type is used to discover and maintain neighbor relationships?

1. Database Description
2. Link-State Request
3. Hello
4. Link-State Update

Correct Answer: 3

Explanation

OSPF Hello packets are used to discover neighboring OSPF routers and maintain neighbor relationships. Routers periodically send Hello messages through OSPF-enabled interfaces. These messages contain information such as the router ID, area ID, timers, and network parameters that must match for an adjacency to form. Database Description packets exchange summaries of link-state databases after neighbors begin forming an adjacency. Link-State Request packets request specific information, while Link-State Update packets carry link-state advertisements. Therefore, Hello packets are essential for OSPF neighbor discovery and maintenance.

Question 386

Which IPv6 prefix is used for link-local unicast addresses?

1. FC00::/7
2. FE80::/10
3. FF00::/8
4. 2000::/3

Correct Answer: 2

Explanation

IPv6 link-local unicast addresses use the FE80::/10 prefix. These addresses are automatically assigned to IPv6-enabled interfaces and are used for communication with devices on the same local link. Routers do not forward link-local traffic between different links. Link-local addresses are also important for IPv6 Neighbor Discovery and routing protocol operations. FC00::/7 identifies unique local addresses, FF00::/8 identifies multicast addresses, and 2000::/3 is associated with global unicast addressing. Therefore, FE80::/10 is the correct link-local prefix.

Question 387

Which protocol provides authentication, authorization, and accounting services for network access?

1. AAA
2. ARP
3. NTP
4. DNS

Correct Answer: 1

Explanation

AAA stands for Authentication, Authorization, and Accounting. Authentication verifies a user’s identity, authorization determines what resources or actions the user is permitted to access, and accounting records information about user activity. AAA can be implemented using protocols such as RADIUS and TACACS+. It is widely used to control administrative access to network devices and user access to network services. ARP resolves IPv4 addresses to MAC addresses, NTP synchronizes time, and DNS resolves names. Therefore, AAA provides the security framework for these three functions.

Question 388

Which command displays the current status and configuration of a specific Cisco interface?

1. show ip route
2. show interfaces
3. show vlan brief
4. show startup-config

Correct Answer: 2

Explanation

The show interfaces command provides detailed information about Cisco interfaces. Depending on the command used, the output can include interface status, hardware information, bandwidth, duplex and speed settings, packet counters, errors, and other operational statistics. Administrators use this information extensively when troubleshooting connectivity or performance problems. show ip route displays routing information, show vlan brief focuses on VLANs, and show startup-config displays the saved configuration. Therefore, show interfaces is the appropriate command for detailed interface information.

Question 389

Which routing protocol uses hop count as its primary metric?

1. OSPF
2. BGP
3. RIP
4. EIGRP

Correct Answer: 3

Explanation

Routing Information Protocol, or RIP, uses hop count as its primary routing metric. Each router crossed by a route adds one hop to the metric. RIP considers a maximum of 15 hops as reachable, while a metric of 16 represents an unreachable destination. OSPF uses cost, BGP uses path attributes, and EIGRP uses a composite metric based on factors such as bandwidth and delay. RIP is simple to configure but is limited by its relatively small maximum hop count and slower convergence characteristics.

Question 390

Which technology allows many private IPv4 hosts to share a single public IPv4 address by using different port numbers?

1. Static NAT
2. PAT
3. DHCP
4. DNS

Correct Answer: 2

Explanation

Port Address Translation, or PAT, allows multiple private IPv4 hosts to share a single public IPv4 address by distinguishing individual connections through transport-layer port numbers. PAT is commonly called NAT overload and is widely used for Internet access in private networks. The router tracks translations so return traffic can be delivered to the correct internal host. Static NAT creates fixed one-to-one mappings, while DHCP assigns addresses and DNS resolves names. PAT provides significant address conservation by allowing many internal devices to use one public address.

Question 391

Which Cisco command displays the configured IPv4 routes learned through OSPF?

1. show ip route ospf
2. show ip ospf neighbor
3. show interfaces ospf
4. show ospf database

Correct Answer: 1

Explanation

The show ip route ospf command displays routes in the IPv4 routing table that were learned through OSPF. Cisco routing tables identify OSPF routes with the code O. This command is useful for verifying whether expected OSPF networks have been successfully installed into the routing table. The show ip ospf neighbor command focuses on OSPF neighbor relationships, while other commands provide different OSPF information. Examining OSPF routes can help determine whether route advertisements, path calculations, and routing-table installation are functioning correctly.

Question 392

Which IEEE standard defines VLAN tagging for Ethernet trunk links?

1. 802.11ac
2. 802.1X
3. 802.3af
4. 802.1Q

Correct Answer: 4

Explanation

IEEE 802.1Q defines VLAN tagging for Ethernet frames transmitted across trunk links. The 802.1Q tag contains VLAN identification information that allows switches to determine which VLAN a frame belongs to as it crosses a trunk. This makes it possible for a single physical link to carry traffic from multiple VLANs. 802.11ac is a wireless standard, 802.1X provides port-based network access control, and 802.3af defines an early Power over Ethernet standard. Therefore, 802.1Q is the correct VLAN-tagging standard.

Question 393

Which command displays information about the Cisco device’s operating system version and hardware?

1. show version
2. show running-config
3. show flash
4. show processes

Correct Answer: 1

Explanation

The show version command provides important information about a Cisco device, including the IOS or IOS XE software version, device uptime, hardware platform, memory information, configuration register, and other system details. It is commonly used during troubleshooting and inventory checks. The show running-config command displays the active configuration, while show flash focuses on files stored in flash memory. show processes provides information about running processes and resource usage. Therefore, show version is the standard command for obtaining basic system and software information.

Question 394

Which IPv6 mechanism verifies that an address is not already in use before assigning it to an interface?

1. ARP
2. DAD
3. PAT
4. DHCP

Correct Answer: 2

Explanation

Duplicate Address Detection, or DAD, is an IPv6 mechanism used to determine whether a proposed IPv6 address is already being used on the local link. Before an address becomes fully usable, the host sends an appropriate Neighbor Discovery message to check whether another device responds as the owner of that address. This helps prevent duplicate IPv6 addresses from being assigned to multiple interfaces. IPv6 does not use ARP; it uses Neighbor Discovery Protocol. PAT is an IPv4 translation technology, while DHCP is an address configuration protocol.

Question 395

Which protocol is commonly used to securely transfer configuration files using encryption and authentication?

1. TFTP
2. SCP
3. DNS
4. SNMP

Correct Answer: 2

Explanation

Secure Copy Protocol, or SCP, provides encrypted file transfer using SSH. It can be used to securely copy configuration files, Cisco software images, and other files between network devices and servers. SCP provides stronger security than TFTP because the communication is protected through SSH encryption and authentication. TFTP is a simple file-transfer protocol without built-in encryption, while DNS provides name resolution and SNMP is primarily used for monitoring and management. SCP is therefore appropriate when secure file transfer is required.

Question 396

Which network device forwards packets between different IP networks?

1. Hub
2. Layer 2 bridge
3. Router
4. Access point

Correct Answer: 3

Explanation

A router is a Layer 3 device designed to forward IP packets between different networks. It examines the destination IP address of a packet and consults its routing table to determine the appropriate outgoing interface or next hop. Hubs operate at the physical layer, while traditional Layer 2 bridges forward Ethernet frames based on MAC addresses within a local network. Wireless access points primarily provide wireless connectivity and bridge wireless clients into a wired network. Therefore, a router is the device responsible for forwarding traffic between different IP networks.

Question 397

Which wireless feature identifies the name of a Wi-Fi network that users select when connecting?

1. BSSID
2. SSID
3. MAC address
4. VLAN ID

Correct Answer: 2

Explanation

The Service Set Identifier, or SSID, is the name associated with a wireless network that users typically see when viewing available Wi-Fi networks. An administrator can configure an access point with an SSID to identify a wireless network. The BSSID identifies a specific wireless access point radio and is generally represented by a MAC address. A VLAN ID identifies a Layer 2 VLAN, while a MAC address identifies a network interface. Therefore, SSID is the term associated with the visible wireless network name.

Question 398

Which protocol is commonly used to collect and monitor network-device information using a manager and agents?

1. SNMP
2. FTP
3. SSH
4. DHCP

Correct Answer: 1

Explanation

Simple Network Management Protocol, or SNMP, is commonly used to monitor and manage network devices through a manager-agent architecture. An SNMP manager can request information from agents running on routers, switches, servers, and other devices. Monitoring information may include interface status, traffic counters, CPU utilization, and memory statistics. SNMP can also use traps or informs to notify management systems about certain events. FTP transfers files, SSH provides secure remote CLI access, and DHCP assigns network configuration, making SNMP the correct choice.

Question 399

Which Cisco protocol can negotiate EtherChannel using the active and passive modes?

1. PAgP
2. DTP
3. LACP
4. STP

Correct Answer: 3

Explanation

Link Aggregation Control Protocol, or LACP, is an IEEE standards-based protocol used to negotiate EtherChannel links. LACP uses active and passive modes. An active interface actively attempts to form an EtherChannel, while a passive interface responds to LACP negotiation initiated by the neighboring device. PAgP is Cisco proprietary and uses desirable and auto modes. DTP negotiates trunking, and STP prevents Layer 2 loops. LACP provides a standards-based method for aggregating multiple Ethernet links into one logical EtherChannel.

Question 400

Which command displays the configuration saved in NVRAM that will be used after a Cisco device reloads?

1. show running-config
2. show startup-config
3. show version
4. show interfaces

Correct Answer: 2

Explanation

The show startup-config command displays the configuration saved in NVRAM on a Cisco device. This configuration is normally loaded when the device starts or reloads. It is different from the running configuration, which is stored in RAM and represents the configuration currently active on the device. Administrators commonly compare the running and startup configurations to ensure recent changes have been saved. The show version command provides system information, while show interfaces provides interface statistics and operational details.