View Full Cisco 200-301 Exam Dumps and Practice Test Dumps.

 

Question 161

Which IPv4 subnet mask provides 14 usable host addresses?

1. 255.255.255.248
2. 255.255.255.240
3. 255.255.255.224
4. 255.255.255.192

Correct Answer: 2

Explanation

The subnet mask 255.255.255.240 represents a /28 prefix. A /28 subnet contains 16 total IPv4 addresses. One address is reserved for the network address and another for the broadcast address, leaving 14 usable host addresses. A /29 provides 6 usable addresses, /27 provides 30, and /26 provides 62. Therefore, 255.255.255.240 is the correct subnet mask for a network that requires 14 usable IPv4 host addresses.

Question 162

Which command places a Cisco switch interface into trunk mode?

1. switchport mode access
2. switchport trunk native vlan 10
3. switchport mode trunk
4. switchport access vlan 10

Correct Answer: 3

Explanation

The switchport mode trunk command statically configures a Cisco switch interface to operate as an IEEE 802.1Q trunk. A trunk can carry traffic from multiple VLANs across a single physical connection. Additional commands can be used to configure the native VLAN and allowed VLAN list. switchport mode access configures an access port, while switchport access vlan assigns an access port to a VLAN. Therefore, switchport mode trunk is the correct command for configuring a trunk interface.

Question 163

Which routing protocol uses cost as its primary metric?

1. OSPF
2. RIP
3. BGP
4. ARP

Correct Answer: 1

Explanation

OSPF uses cost as its primary routing metric. The cost is typically calculated from the reference bandwidth and the interface bandwidth, allowing OSPF to prefer paths with lower overall cost. Routers use these costs when running the Shortest Path First algorithm to determine the best paths through the topology. RIP uses hop count, while BGP uses path attributes for route selection. ARP is not a routing protocol. Therefore, OSPF is the protocol that primarily uses cost as its routing metric.

Question 164

Which command displays the IPv6 addresses configured on Cisco interfaces in a concise format?

1. show ipv6 route
2. show ipv6 interface brief
3. show ip interface brief
4. show interfaces trunk

Correct Answer: 2

Explanation

The show ipv6 interface brief command provides a concise summary of IPv6-enabled interfaces and their configured IPv6 addresses. It is useful when administrators need to quickly verify interface addressing and operational status. The show ipv6 route command displays the IPv6 routing table, while show ip interface brief focuses on IPv4 information. show interfaces trunk is used to inspect Layer 2 trunking. Therefore, show ipv6 interface brief is the correct command for quickly reviewing IPv6 interface addresses.

Question 165

Which technology allows multiple physical Ethernet links to operate as one logical link?

1. VLAN
2. EtherChannel
3. NAT
4. PortFast

Correct Answer: 2

Explanation

EtherChannel combines multiple physical Ethernet links into a single logical link. This provides increased bandwidth and redundancy while simplifying how the links are treated by Layer 2 protocols such as STP. EtherChannel can be negotiated using protocols such as LACP or, on Cisco devices, PAgP. VLANs provide logical segmentation, NAT translates IP addresses, and PortFast changes STP behavior on edge ports. Therefore, EtherChannel is the technology that allows multiple physical Ethernet connections to operate as one logical connection.

Question 166

Which IPv4 address is from the APIPA or link-local address range?

1. 10.10.10.5
2. 169.254.25.10
3. 172.16.10.1
4. 192.168.1.10

Correct Answer: 2

Explanation

The address 169.254.25.10 belongs to the IPv4 link-local range 169.254.0.0/16, commonly called APIPA. A host may automatically assign an address from this range when it is configured to use DHCP but cannot obtain a valid address from a DHCP server. APIPA addresses are intended for local-link communication and are not normally routed between networks. The other addresses are private IPv4 addresses from RFC 1918 ranges. Therefore, 169.254.25.10 is the correct example of an APIPA address.

Question 167

Which security feature can inspect DHCP messages and create a binding table containing IP addresses and MAC addresses?

1. PortFast
2. DHCP Snooping
3. Root Guard
4. EtherChannel

Correct Answer: 2

Explanation

DHCP Snooping monitors DHCP traffic on a switch and can create a binding database containing information such as the client’s MAC address, assigned IP address, VLAN, and switch interface. This database can later support other security features, including Dynamic ARP Inspection and IP Source Guard. DHCP Snooping also distinguishes trusted from untrusted interfaces to help prevent rogue DHCP servers. PortFast and Root Guard are STP-related features, while EtherChannel combines physical links. Therefore, DHCP Snooping is the correct security feature.

Question 168

Which command displays information about OSPF process configuration and routing protocol status?

1. show ip ospf
2. show mac address-table
3. show vlan brief
4. show interfaces status

Correct Answer: 1

Explanation

The show ip ospf command displays information about the OSPF process running on a Cisco router. Depending on the configuration, the output can include the router ID, areas, timers, SPF information, and other OSPF operational details. This command is useful for troubleshooting OSPF configuration and understanding how the routing process is operating. The other commands focus on MAC addresses, VLANs, and switch interface status. Therefore, show ip ospf is the appropriate command for viewing OSPF process information.

Question 169

Which IPv6 multicast address represents all IPv6 routers on the local link?

1. FF02::1
2. FF02::2
3. FE80::1
4. FF05::1

Correct Answer: 2

Explanation

The IPv6 multicast address FF02::2 represents all IPv6 routers on the local link. IPv6 uses multicast groups for communication with specific groups of devices instead of relying on traditional broadcast traffic. FF02::1 represents all IPv6 nodes on the local link, while FF02::2 specifically identifies routers. FE80::1 is within the link-local unicast address space, and FF05::1 has a different multicast scope. Therefore, FF02::2 is the correct multicast address for all IPv6 routers on the local link.

Question 170

Which command can be used to verify the operational status of a specific Cisco interface?

1. show interface GigabitEthernet0/1
2. show ip route
3. show users
4. show vlan

Correct Answer: 1

Explanation

The show interface GigabitEthernet0/1 command displays detailed operational information for the specified interface. The output can include physical and line protocol status, bandwidth, duplex, speed, packet counters, errors, and other interface statistics. This makes the command useful for diagnosing physical connectivity and performance issues. show ip route displays routing information, show users lists active sessions, and show vlan provides VLAN information. Therefore, the interface-specific show interface command is appropriate for checking an individual interface.

Question 171

Which protocol provides automatic time synchronization between network devices?

1. SNMP
2. NTP
3. Syslog
4. DHCP

Correct Answer: 2

Explanation

Network Time Protocol, or NTP, synchronizes clocks between network devices and reliable time sources. Accurate time is important for troubleshooting, security auditing, authentication, and correlating events across centralized logs. Cisco routers and switches can be configured to use NTP servers so that their timestamps remain consistent. SNMP is primarily used for monitoring, Syslog collects event messages, and DHCP provides network configuration. Therefore, NTP is the protocol specifically designed for automatic time synchronization between network devices.

Question 172

Which type of ACL is generally placed closer to the destination because it provides detailed traffic filtering?

1. Standard ACL
2. Extended ACL
3. MAC table
4. VLAN ACL only

Correct Answer: 2

Explanation

Extended ACLs can evaluate source and destination IP addresses, protocols, and port numbers, allowing highly specific traffic filtering. A common design guideline is to place extended ACLs close to the source of unwanted traffic so that undesirable traffic can be stopped before consuming network resources. Standard ACLs are generally placed closer to the destination because they primarily evaluate source addresses and have less granular filtering capability. Therefore, among the options, an extended ACL is the type that provides detailed traffic filtering. Proper placement should always consider the specific security policy.

Question 173

Which protocol is commonly used to assign IPv4 addresses dynamically to client devices?

1. DHCP
2. OSPF
3. BGP
4. STP

Correct Answer: 1

Explanation

Dynamic Host Configuration Protocol, or DHCP, automatically provides IPv4 configuration information to client devices. A DHCP server can assign an IP address, subnet mask, default gateway, DNS server information, and other parameters for a defined lease period. This reduces manual configuration and helps administrators manage addressing efficiently across large networks. OSPF and BGP exchange routing information, while STP prevents Layer 2 switching loops. Therefore, DHCP is the protocol responsible for dynamically assigning IPv4 addresses to client devices.

Question 174

Which Cisco IOS command displays the startup configuration saved in NVRAM?

1. show running-config
2. show startup-config
3. show flash:
4. show version

Correct Answer: 2

Explanation

The show startup-config command displays the configuration stored in NVRAM that the Cisco device will use during the next boot. This configuration is separate from the active running configuration in RAM. Administrators commonly compare the running and startup configurations to determine whether recent changes have been saved. The show running-config command displays the active configuration, while show flash: lists files stored in flash memory. Therefore, show startup-config is the correct command for viewing the saved configuration.

Question 175

Which wireless security method provides authentication using a pre-shared key?

1. WPA2-Personal
2. WPA2-Enterprise
3. 802.1X with RADIUS only
4. Open authentication

Correct Answer: 1

Explanation

WPA2-Personal uses a pre-shared key, commonly called a PSK, to authenticate wireless clients to a network. The same shared credential is typically configured on the access point and participating client devices. WPA2-Enterprise uses individual authentication through an authentication server, commonly RADIUS, rather than relying on one shared password for all users. Open authentication provides no comparable shared security credential. Therefore, WPA2-Personal is the wireless security method that uses a pre-shared key for authentication.

Question 176

Which routing table entry is preferred when two routes to the same destination have different administrative distances?

1. The route with the higher administrative distance
2. The route with the lower administrative distance
3. The route learned most recently
4. The route with the highest metric only

Correct Answer: 2

Explanation

When a router has multiple routes to the same destination learned from different routing sources, administrative distance is used to determine which source is considered more trustworthy. The route with the lower administrative distance is preferred. For example, a static route normally has an administrative distance of 1, while an OSPF route has an administrative distance of 110. Metrics are then used within a routing protocol to select the best path among routes from that same protocol. Therefore, the lower administrative distance is preferred between different route sources.

Question 177

Which protocol is responsible for securely managing a Cisco device through an encrypted remote CLI session?

1. Telnet
2. SSH
3. TFTP
4. SNMP

Correct Answer: 2

Explanation

Secure Shell, or SSH, provides encrypted remote command-line access to Cisco routers and switches. SSH protects login credentials and management traffic from being transmitted in clear text, making it much safer than Telnet for remote administration. Administrators can configure local usernames, domain information, RSA keys, and VTY lines to enable SSH access. TFTP is used for file transfers, SNMP is used for monitoring and management, and Telnet does not encrypt its session. Therefore, SSH is the correct protocol for secure remote CLI management.

Question 178

Which Cisco IOS command enables a Layer 3 switch to perform IPv4 routing?

1. ip routing
2. ip forwarding enable
3. router enable
4. routing ipv4

Correct Answer: 1

Explanation

The ip routing command enables IPv4 routing on a Cisco multilayer switch. Once enabled, the switch can perform Layer 3 forwarding between directly connected networks and configured routing sources. This capability allows multilayer switches to perform functions such as inter-VLAN routing using SVIs. Layer 2 switches do not require ip routing for normal frame switching. The other commands listed are not valid Cisco IOS commands for enabling IPv4 routing. Therefore, ip routing is the correct command.

Question 179

Which protocol is used by DHCP clients during the initial broadcast to locate available DHCP servers?

1. DHCPACK
2. DHCPREQUEST
3. DHCPDISCOVER
4. DHCPOFFER

Correct Answer: 3

Explanation

DHCPDISCOVER is the first major message sent by a DHCP client when it needs to locate available DHCP servers. Because the client may not yet have an IP address or know the DHCP server’s address, the message is normally sent as a broadcast on the local network. DHCP servers respond with DHCPOFFER messages containing proposed configuration information. DHCPREQUEST is used later when the client requests a specific offer, and DHCPACK confirms the assigned configuration. Therefore, DHCPDISCOVER is the correct initial discovery message.

Question 180

Which network automation technology is designed to allow applications to interact with network devices using standardized HTTP-based operations?

1. RESTCONF
2. Console access
3. Telnet
4. FTP

Correct Answer: 1

Explanation

RESTCONF is a network management protocol that provides programmatic access to configuration and operational data using REST-style HTTP methods. It commonly works with YANG data models and can use structured formats such as JSON or XML. RESTCONF allows automation applications to retrieve, create, modify, and delete network resources through standardized web-based operations. Console access and Telnet are primarily interactive management methods, while FTP is designed for file transfers. Therefore, RESTCONF is the correct technology for HTTP-based network automation and device management.