200-301 Question #1535: Real Exam Question with Answer & Explanation

Question

Lab Simulation 32 Guidelines This is a lab item in which tasks will be performed on virtual devices. - Refer to the Tasks tab to view the tasks for this lab item. - Refer to the Topology lab to access the device console(s) and perform the tasks. - Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window. - All necessary preconfigurations have been applied. - Do not change the enable password or hostname for any device. - Save your configurations to NVRAM before moving to the next item. - Click Next at the bottom of the screen to submit this lab and move to the next question. - When Next is clicked, the lab closes and cannot be reopened. Topology Tasks Refer to the topology. All physical cabling is in place. Configure local user account, configure a Named ACL (NACL), and Dynamic Arp Inspection. 1. Configure a local account on Sw3 with telnet access only on virtual ports 0-4. Use the following information: - Username: tech12 - Password: load1key - Algorithm type: md5 - Privilege level: Exec mode 2. Configure and apply a NACL on R1 to control network traffic towards ISP: - Name: ISP_ACL - Restrict RFC 1918 class A and B addresses - Allow all other addresses 3. A DHCP IP Pool is preconfigured on R1 for VLAN 5, and DHCP Snooping is configured on Sw2. Configure on Sw2: - Dynamic Arp Inspection for VLAN 5 - Enable validation of the ARP packet destination MAC address - Enable validation of the ARP packet source MAC address - Enable validation of the ARP Packet IP address Answer:

Options

• taskConfigure a local account on Sw3 with telnet access only on virtual ports 0-4 using specified credentials (username: tech12, password: load1key, algorithm type: md5, privilege level: Exec mode). Configure and apply a Named ACL (ISP_ACL) on R1 to control network traffic towards ISP, restricting RFC 1918 class A and B addresses and allowing all other addresses. Configure Dynamic ARP Inspection for VLAN 5 on Sw2, enabling validation of destination MAC address, source MAC address, and IP address.
• prerequisitesAccess to virtual device consoles (Sw3, R1, Sw2). All necessary preconfigurations have been applied. Do not change the enable password or hostname for any device. Save configurations to NVRAM before moving to the next item.