View Full Cisco 200-301 Exam Dumps and Practice Test Dumps.

 

Question 121

Which IPv4 address is a valid private address according to RFC 1918?

1. 11.10.10.1
2. 172.20.15.5
3. 192.0.2.10
4. 198.51.100.5

Correct Answer: 2

Explanation

The IPv4 address 172.20.15.5 belongs to the private 172.16.0.0/12 address range defined by RFC 1918. Private addresses are commonly used inside organizations and are not directly routable across the public Internet. The other ranges shown are not RFC 1918 private address space. The private IPv4 ranges are 10.0.0.0/8, 172.16.0.0/12, and 192.168.0.0/16. Therefore, 172.20.15.5 is a valid private IPv4 address and can be used within an internal network.

Question 122

Which command displays detailed information about an individual Cisco switch interface, including speed, duplex, and errors?

1. show interfaces
2. show vlan brief
3. show ip route
4. show users

Correct Answer: 1

Explanation

The show interfaces command provides detailed operational information about Cisco interfaces. The output can include interface status, hardware details, bandwidth, duplex mode, speed, packet counters, errors, and other statistics. Administrators commonly use this command when troubleshooting connectivity, performance, or physical-layer problems. show vlan brief focuses on VLAN assignments, show ip route displays routing information, and show users identifies active management sessions. Therefore, show interfaces is the appropriate command for obtaining detailed interface operational information.

Question 123

Which protocol resolves an IPv4 address to the corresponding MAC address on a local network?

1. DNS
2. DHCP
3. ARP
4. NTP

Correct Answer: 3

Explanation

Address Resolution Protocol, or ARP, maps an IPv4 address to a MAC address on a local network segment. When a host needs to send an Ethernet frame to another device on the same subnet but does not know its MAC address, it can broadcast an ARP request asking which device owns the target IPv4 address. The destination device responds with its MAC address, allowing the sender to construct the Ethernet frame. DNS resolves names, DHCP provides configuration, and NTP synchronizes time. Therefore, ARP performs IPv4-to-MAC resolution.

Question 124

Which IPv6 mechanism replaces ARP for discovering the link-layer address of a neighboring device?

1. DHCPv6
2. NDP
3. NAT
4. FTP

Correct Answer: 2

Explanation

IPv6 uses Neighbor Discovery Protocol, or NDP, instead of ARP to discover neighboring devices and their link-layer addresses. NDP uses ICMPv6 messages, including Neighbor Solicitation and Neighbor Advertisement, to perform address resolution and other functions. It also supports router discovery, prefix discovery, and duplicate address detection. DHCPv6 can provide addressing information but does not replace ARP through the same mechanism. NAT and FTP perform completely different functions. Therefore, NDP is the correct IPv6 mechanism for neighbor and link-layer discovery.

Question 125

Which type of Ethernet cable is traditionally used to directly connect two similar devices, such as two switches, when automatic crossover is unavailable?

1. Straight-through cable
2. Rollover cable
3. Crossover cable
4. Console cable

Correct Answer: 3

Explanation

A crossover Ethernet cable is traditionally used to directly connect similar Ethernet devices, such as switch-to-switch or router-to-router connections, when the interfaces do not support automatic medium-dependent interface crossover. A crossover cable swaps the transmit and receive pairs so both devices can communicate correctly. Modern Cisco interfaces commonly support auto-MDIX, which can automatically detect and compensate for cable type, reducing the need for manual crossover cables. Straight-through cables are traditionally used between different device types. Therefore, a crossover cable is the correct traditional choice.

Question 126

Which IPv4 address represents the broadcast address for the 192.168.40.64/27 subnet?

1. 192.168.40.65
2. 192.168.40.94
3. 192.168.40.95
4. 192.168.40.96

Correct Answer: 3

Explanation

A /27 subnet contains 32 addresses. For the 192.168.40.64/27 network, the addresses range from 192.168.40.64 through 192.168.40.95. The first address, .64, is the network address, while the final address, .95, is the broadcast address. Usable host addresses are .65 through .94. The next subnet begins at .96. Therefore, 192.168.40.95 is the broadcast address for the 192.168.40.64/27 subnet.

Question 127

Which protocol is responsible for sending network event and logging messages to a centralized server?

1. Syslog
2. SNMP
3. DNS
4. TFTP

Correct Answer: 1

Explanation

Syslog is commonly used to send system and network event messages from devices to a centralized logging server. Network administrators can collect logs from routers, switches, firewalls, and other systems in one location, making troubleshooting and security monitoring easier. Syslog messages can contain different severity levels, helping administrators prioritize important events. SNMP is mainly used for monitoring and management, DNS resolves names, and TFTP transfers files. Therefore, Syslog is the protocol specifically designed for centralized collection of device event and logging messages.

Question 128

What is the primary function of a router’s routing table?

1. Store Ethernet frame contents
2. Determine paths toward destination networks
3. Assign MAC addresses
4. Authenticate network users

Correct Answer: 2

Explanation

A router’s routing table contains information used to determine how packets should be forwarded toward destination networks. Entries can be learned from directly connected interfaces, static routes, or dynamic routing protocols. When a packet arrives, the router examines its destination IP address and searches the routing table for the best matching route. The selected entry determines the next hop or outgoing interface. Routing tables do not assign MAC addresses or authenticate users. Therefore, determining forwarding paths toward destination networks is the primary function of a routing table.

Question 129

Which protocol is commonly used to securely copy files between network devices using SSH-based encryption?

1. SCP
2. TFTP
3. FTP
4. HTTP

Correct Answer: 1

Explanation

Secure Copy Protocol, or SCP, provides encrypted file transfer using SSH. Cisco network administrators can use SCP to securely copy configuration files, software images, and other files between supported devices and servers. Because SCP uses SSH for authentication and encryption, it provides stronger security than traditional TFTP or FTP. TFTP provides simple file transfer without authentication or encryption, while traditional FTP also lacks built-in encryption. Therefore, SCP is the appropriate choice when secure file copying is required between network devices.

Question 130

Which OSPF area is commonly used as the central area to which other OSPF areas connect?

1. Area 1
2. Area 10
3. Area 100
4. Area 0

Correct Answer: 4

Explanation

OSPF Area 0, also known as the backbone area, serves as the central area in a multi-area OSPF design. Other OSPF areas are normally connected to Area 0 so that routing information can be exchanged between areas through the backbone. Using multiple areas can reduce the size of link-state databases and limit the scope of certain topology changes. Area numbers other than 0 can represent regular OSPF areas, but Area 0 has the special role of backbone. Therefore, Area 0 is the correct answer.

Question 131

Which switch forwarding method begins transmitting a frame before the entire frame has been received?

1. Store-and-forward
2. Cut-through
3. Fragment-free only
4. Process-and-forward

Correct Answer: 2

Explanation

Cut-through switching begins forwarding an Ethernet frame after reading enough of the frame to determine the destination MAC address, rather than waiting for the entire frame to arrive. This can reduce forwarding latency compared with store-and-forward switching. Store-and-forward receives the complete frame and checks the frame’s integrity before forwarding it. Modern switches may use different forwarding methods depending on hardware and configuration. Therefore, cut-through switching is the method that can begin transmitting a frame before the entire frame has been received.

Question 132

Which IPv6 feature allows a host to detect whether another device is already using an address before assigning it?

1. Duplicate Address Detection
2. NAT
3. Port Security
4. DHCP Snooping

Correct Answer: 1

Explanation

Duplicate Address Detection, or DAD, is an IPv6 mechanism used to determine whether an IPv6 address is already in use on the local link before the address is assigned to an interface. DAD uses Neighbor Discovery Protocol messages, particularly Neighbor Solicitation, to check for another device using the same address. This helps prevent duplicate addressing problems in IPv6 networks. NAT translates addresses, Port Security controls MAC addresses on switch ports, and DHCP Snooping protects against unauthorized DHCP servers. Therefore, Duplicate Address Detection is the correct answer.

Question 133

Which VLAN type is commonly configured for IP phone traffic on a Cisco switch?

1. Native VLAN
2. Management VLAN
3. Voice VLAN
4. Default VLAN only

Correct Answer: 3

Explanation

A voice VLAN is specifically designed to carry IP phone traffic separately from normal data traffic. Cisco switches can configure an access interface with a data VLAN and a voice VLAN, allowing an IP phone and a connected computer to share the physical port while keeping their traffic logically separated. Voice VLANs can also support quality-of-service policies and security controls appropriate for voice traffic. A management VLAN is used for device management, while the native VLAN handles untagged trunk traffic. Therefore, the voice VLAN is the correct choice for IP phone traffic.

Question 134

Which routing protocol is an exterior gateway protocol commonly used to exchange routes between autonomous systems?

1. RIP
2. OSPF
3. EIGRP
4. BGP

Correct Answer: 4

Explanation

Border Gateway Protocol, or BGP, is the primary exterior gateway protocol used to exchange routing information between autonomous systems. It is a path-vector protocol and makes routing decisions using attributes such as AS path, local preference, and other policy-related information. BGP is widely used by Internet service providers and large organizations that require control over inter-domain routing. RIP, OSPF, and EIGRP are primarily associated with routing within an organization or autonomous system. Therefore, BGP is the correct protocol for inter-autonomous-system routing.

Question 135

Which command can display the IP-to-MAC address mappings learned by a Cisco router?

1. show arp
2. show vlan
3. show cdp
4. show spanning-tree

Correct Answer: 1

Explanation

The show arp command displays the ARP table on a Cisco device, showing mappings between IPv4 addresses and corresponding MAC addresses. This information is useful when troubleshooting local IPv4 connectivity because routers need to know the Layer 2 destination information for directly connected devices. The output can include the protocol, IP address, age, hardware address, and interface associated with an entry. The other commands provide VLAN, neighbor discovery, or STP information. Therefore, show arp is the appropriate command for viewing IPv4-to-MAC mappings.

Question 136

Which security principle gives a user only the permissions necessary to perform assigned tasks?

1. Defense in depth
2. Least privilege
3. High availability
4. Load balancing

Correct Answer: 2

Explanation

The principle of least privilege means that users, devices, or applications should receive only the permissions required to perform their legitimate tasks. Limiting privileges reduces the potential impact of compromised accounts, accidental changes, or unauthorized activity. In network administration, this can involve restricting which commands an administrator can execute or which resources a user can access. Defense in depth uses multiple security controls, while high availability focuses on uptime and load balancing distributes traffic. Therefore, least privilege is the correct security principle.

Question 137

Which protocol is commonly used by routers to exchange routing information within an autonomous system using shortest-path calculations?

1. OSPF
2. FTP
3. SMTP
4. DHCP

Correct Answer: 1

Explanation

OSPF is an interior gateway protocol that uses a link-state database and the Shortest Path First algorithm to calculate routes within an autonomous system. Routers exchange link-state advertisements to maintain information about the network topology. Each router independently calculates its shortest paths based on the collected topology information. FTP transfers files, SMTP handles email delivery, and DHCP provides host configuration. Therefore, OSPF is the correct protocol for exchanging routing information using shortest-path calculations within an autonomous system.

Question 138

Which device function allows a multilayer switch to route traffic between different VLANs?

1. Layer 2 switching only
2. Inter-VLAN routing
3. MAC flooding
4. DHCP Snooping

Correct Answer: 2

Explanation

Inter-VLAN routing allows devices in different VLANs to communicate through Layer 3 routing. A multilayer switch can perform this function by using SVIs, with each SVI representing a VLAN and having an IP address that can serve as the default gateway for hosts in that VLAN. When traffic is destined for another VLAN, the multilayer switch routes the packet between the corresponding Layer 3 interfaces. Layer 2 switching alone cannot route between different IP networks. Therefore, inter-VLAN routing is the correct function.

Question 139

Which IPv4 address represents the limited broadcast address?

1. 0.0.0.0
2. 127.0.0.1
3. 255.255.255.255
4. 224.0.0.1

Correct Answer: 3

Explanation

The IPv4 address 255.255.255.255 is the limited broadcast address. Packets sent to this address are intended for all IPv4 hosts on the local network segment and are not forwarded by routers. Limited broadcasts are useful in situations where the sender does not yet know the appropriate network address, such as certain stages of DHCP operation. The address 0.0.0.0 represents an unspecified address, 127.0.0.1 is a loopback address, and 224.0.0.1 is a multicast address. Therefore, 255.255.255.255 is the limited broadcast address.

Question 140

Which network architecture separates the control plane from the data plane and enables centralized programmability?

1. SDN
2. Token Ring
3. Frame Relay
4. CSMA/CD

Correct Answer: 1

Explanation

Software-defined networking, or SDN, separates control-plane decision-making from data-plane packet forwarding and enables centralized network programmability. An SDN controller can maintain a broader view of the network and communicate with infrastructure devices through programmable interfaces. This approach can simplify configuration, automation, and policy management across multiple devices. Token Ring and Frame Relay are older networking technologies, while CSMA/CD describes an Ethernet media access method used in traditional shared-media networks. Therefore, SDN is the architecture associated with centralized control and programmability.