200-301 Exam Questions
1,744 real 200-301 exam questions with expert-verified answers and explanations. Page 13 of 35.
- Question #620
What differentiates device management enabled by Cisco DNA Center from traditional campus device management?
Cisco DNA CenterNetwork ManagementSDNCentralized Management - Question #621
Refer to the exhibit. What is represented beginning with line 1 and ending with line 5?
JSONData structuresNetwork programmability - Question #622Security Fundamentals
Drag and Drop Question Drag and drop the AAA features from the left onto the corresponding AAA security services on the right. Not all options are used. Answer:
AAAAuthenticationAuthorizationAccounting - Question #623
Refer to the exhibit. Clients on the WLAN are required to use 802.11r. What action must be taken to meet the requirement?
802.11rWLAN Fast Transition802.1X Authentication - Question #624Security Fundamentals
Refer to the exhibit. What must be configured to enable 802.11w on the WLAN?
802.11wPMFWLAN securityWireless configuration - Question #625Security Fundamentals
Which service is missing when RADIUS is selected to provide management access to the WLC?
RADIUSAAAWLC management - Question #626Network Fundamentals
Drag and Drop Question Drag and drop the IPv6 addresses from the left onto the corresponding address types on the right. Answer:
IPv6IPv6 address typesGlobal UnicastUnique Local - Question #627
Refer to the exhibit. When router R1 is sending traffic to IP address 10.56.192.1, which interface or next hop address does it use to route the packet?
Routing tablePacket forwardingLongest prefix match - Question #628IP Connectivity
Refer to the exhibit. Load-balanced traffic is coming in from the WAN destined to a host at 172.16.1.190. Which next-hop is used by the router to forward the request?
IP RoutingLoad BalancingNext-hop determinationRouter forwarding - Question #629
Refer to the exhibit. A network engineer must configure R1 so that it sends all packets destined to the 10.0.0.0/24 network to R3, and all packets destined to PC1 to R2. Which conf...
Static routingCisco IOS routingip route commandNext-hop IP configuration - Question #630IP Services
Which command must be entered to configure a DHCP relay?
DHCP relayip helper-addressCisco CLI - Question #6315.0 Security Fundamentals
What is a zero-day exploit?
Zero-day exploitVulnerabilityCybersecurity - Question #632Security Fundamentals
A network engineer is replacing the switches that belong to a managed-services client with new Cisco Catalyst switches. The new switches will be configured for updated security sta...
Cisco SSH configurationCisco RSA key generation - Question #633
Which QoS queuing method discards or marks packets that exceed the desired bit rate of traffic flow?
QoS policingTraffic managementRate limiting - Question #634
What is the role of disaggregation in controller-based networking?
Controller-based networkingNetwork disaggregationSDN principles - Question #635
Refer to the exhibit. What is the next hop for traffic entering R1 with a destination of 10.1.2.126?
IP routingRouting table lookupNext-hop routingIP addressing - Question #636Network Fundamentals
Refer to the exhibit. The given Windows PC is requesting the IP address of the host at
IP addressingDHCP clientWindows network configurationHost identification - Question #637
Why would VRRP be implemented when configuring a new subnet in a multivendor environment?
VRRPGateway RedundancyHigh AvailabilityMultivendor Networking - Question #638Security Fundamentals
An engineer has configured the domain name, user name, and password on the local router. What is the next step to complete the configuration tor a Secure Shell access RSA key?
Cisco SSH configurationRSA key generationcrypto key generate command - Question #640Security Fundamentals
After a recent security breach and a RADIUS failure, an engineer must secure the console port of each enterprise router with a local username and password. Which configuration must...
Cisco local authenticationConsole port securityRouter security - Question #641Automation and Programmability
Which REST method updates an object in the Cisco DNA Center Intent API?
REST APIHTTP methodsCisco DNA Center API - Question #642Security Fundamentals
Which two practices are recommended for an acceptable security posture in a network? (Choose two)
Physical securityNetwork hardening - Question #643
An administrator must use the password complexity not manufacturer-name command to prevent users from adding "cisco" as a password. Which command must be issued before this command...
Cisco IOS securityPassword complexityConfiguration prerequisites - Question #644IP Connectivity
An engineer is configuring router R1 with an IPv6 static route for prefix 2019:C15C:0CAF:E001::/64. The next hop must be 2019:C15C:0CAF:E002::1. The route must be reachable via the...
IPv6 static routingCisco IOS routing commands - Question #645IP Services
Drag and Drop Question Drag and drop the QoS terms from the left onto the descriptions on the right. Answer:
QoSClassificationPolicingShaping - Question #646
Refer to the exhibit. A network engineer configures the Cisco WLC to authenticate local wireless clients against a RADIUS server. Which task must be performed to complete the proce...
Cisco WLCRADIUS authenticationWireless client access - Question #647
What is a function of Cisco Advanced Malware Protection for a Next-Generation IPS?
Cisco AMPNGIPSMalware detection - Question #648Automation and Programmability
Refer to the exhibit. How many JSON objects are represented?
JSONData structuresSerializationAPI formatting - Question #649IP Connectivity
Refer to the exhibit. Router R1 must be configured to reach the 10.0.3.0/24 network from the 10.0.1.0/24 segment. Which command must be used to configure the route?
Static routingCisco IOS commandsIP route commandNext-hop - Question #650
Refer to the exhibit. The administrator must configure a floating static default route that points to 2001:db8:1234:2::1 and replaces the current default route only if it fails. Wh...
IPv6 static routingDefault routeAdministrative distanceCisco IOS configuration - Question #651
What is the function of "off-the-shell" switches in a controller-based network?
SDN switchesData planePacket forwarding - Question #652
Which command entered on a switch configured with Rapid PVST+ listens and learns for a specific time period?
Rapid PVST+STP timersCisco switch commandsLayer 2 protocols - Question #653Security Fundamentals - Understanding AAA protocols and their differences (CCNA / CompTIA Security+ / Network+ domain covering authentication, authorization, and accounting infrastructure)
Drag and Drop Question Drag and drop the functions of AAA supporting protocols from the left onto the protocols on the right. Answer:
AAARADIUSTACACS+Network Security Protocols - Question #654Network Fundamentals – Explain the characteristics and uses of IPv6 address types (Unicast, Multicast, Anycast) including their subtypes and address ranges (CCNA Domain 1: Network Fundamentals)
Drag and Drop Question Drag and drop the IPv6 address details from the left onto the corresponding types on the right. Answer:
IPv6 AddressingUnicast Multicast AnycastNetwork LayerIPv6 Address Types - Question #655CompTIA Network+ / CompTIA A+ - Network Fundamentals: Compare and contrast TCP and UDP protocols and their characteristics
Drag and Drop Question Drag and drop the TCP or UDP details from the left onto their corresponding protocols on the right. Answer:
TCPUDPTransport Layer ProtocolsNetwork Fundamentals - Question #656Network Fundamentals - Understanding the role and characteristics of TCP and UDP transport layer protocols (e.g., CompTIA Network+, CCNA 1.5 / 4.x)
Drag and Drop Question Drag and drop each characteristic of device-management technologies from the left onto the deployment type on the right. Answer:
TCP vs UDPTransport Layer ProtocolsNetwork FundamentalsProtocol Characteristics - Question #657Security and Risk Management - Understanding the components of an organizational security program, including the distinctions between awareness, training, education, policies, and standards (aligns with CISSP Domain 1 and CompTIA Security+ governance objectives)
Drag and Drop Question Drag and drop the elements of a security program from the left onto the corresponding descriptions on the right. Answer:
Security Program ManagementSecurity Awareness and TrainingGovernanceSecurity Policy Framework - Question #658Infrastructure Security – Cisco IOS Layer 2 attack mitigation features (CCNA/CCNP Security or Enterprise domains)
Drag and Drop Question Drag and drop the Cisco IOS attack mitigation features from the left onto the types of network attack they mitigate on the right. Answer:
Layer 2 SecurityDHCP SnoopingDynamic ARP InspectionNetwork Attack Mitigation - Question #659IP Services
Which command implies the use of SNMPv3?
SNMPv3Cisco IOS CommandsNetwork Monitoring - Question #660Network Fundamentals
Drag and Drop Question Refer to Exhibit. The IP address configurations must be completed on the DC-1 and HQ-1 routers based on these requirements: DC-1 Gi1/0 must be the last usabl...
IP AddressingSubnettingInterface ConfigurationIPv4 - Question #661Network Fundamentals – Understanding IPv6 address types including unique local addresses (ULA), link-local addresses, and multicast addresses, and their characteristics and use cases (maps to Cisco CCNA/ENCOR exam domain: Network Fundamentals)
Drag and Drop Question Drag and drop the IPv6 address descriptions from the left onto the IPv6 address types on the right. Not all options are used. Answer:
IPv6 AddressingUnique Local AddressesLink-Local AddressesIPv6 Address Types - Question #662Network Fundamentals
Drag and Drop Question Drag and drop the IPv6 addresses from the left onto the corresponding address types on the right. Answer:
IPv6 AddressingIPv6 Address TypesUnique Local UnicastAddress Characteristics - Question #663
Refer to the exhibit. R1 has taken the DROTHER role in the OSPF DR/BDR election process. Which configuration must an engineer implement so that R1 is elected as the DR?
OSPF DR/BDR electionOSPF priorityCisco IOS interface configuration - Question #664
What is a feature of WPA?
WPAWireless securityTKIP/MIC - Question #665IP Services
Refer to the exhibit. The network administrator must prevent the switch Cat9K-2 IP address from being visible in LLDP without disabling the protocol. Which action must be taken mus...
LLDP configurationLLDP TLVnetwork device discovery - Question #666
Refer to the exhibit. What are the two steps an engineer must take to provide the highest encryption and authentication using domain credentials from LDAP?
Wireless Security802.1XWPA2-EnterpriseLDAP Authentication - Question #667Network Fundamentals
Which WAN topology has the highest degree of reliability?
WAN topologyNetwork reliability - Question #668
Refer to the exhibit. Which change to the configuration on Switch2 allows the two switches to establish an EtherChannel?
LACPEtherChannel configurationEtherChannel modesPAgP - Question #669IP Connectivity
Refer to the exhibit. An engineer is asked to configure router R1 so that it forms an OSPF single- area neighbor relationship with R2. Which command sequence must be implemented to...
OSPFRouter configurationWildcard maskOSPF adjacency - Question #670Network Fundamentals
What is a function performed by a web server?
Web serverHTTP