TorrentVCE

http://www.torrentvce.com
Pass the Actual Test with the Latest Vce Torrent at first attempt
 Instant Download - Best Exam Practice Material - 100% Money Back Guarantee!
IT Certification Guaranteed, The Easy Way!

Exam : 200-301

Title : Cisco Certified Network

Associate Exam

Vendor : Cisco

Version : DEMO

Get Latest & Valid 200-301 Exam's Question and Answers 1 from Torrentvce.com. 1
http://www.torrentvce.com/200-301-valid-vce-collection.html
 Instant Download - Best Exam Practice Material - 100% Money Back Guarantee!
IT Certification Guaranteed, The Easy Way!

NO.1 Refer to the exhibit. Which command provides this output?

A. show ip interface
B. show cdp neighbor
C. show interface
D. show ip route
Answer: B

NO.2 What is the destination MAC address of a broadcast frame?

A. ff:ff:ff:ff:ff:ff
B. 00:00:0c:07:ac:01
C. 00:00:0c:ff:ff:ff
D. 00:00:0c:43:2e:08
E. 43:2e:08:00:00:0c
Answer: A

NO.3 Which feature on the Cisco Wireless LAN Controller when enabled restricts management
access from specific networks?
A. TACACS
B. Flex ACL
C. CPU ACL
D. RADIUS
Answer: C
Explanation:
Whenever you want to control which devices can talk to the main CPU, a CPU ACL is used.
Note: CPU ACLs only filter traffic towards the CPU, and not any traffic exiting or generated by the
CPU.
Reference: https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-
controllers/109669-secure-wlc.html

NO.4 Which two encoding methods are supported by REST APIs? (Choose two)

Get Latest & Valid 200-301 Exam's Question and Answers 2 from Torrentvce.com. 2
http://www.torrentvce.com/200-301-valid-vce-collection.html
 Instant Download - Best Exam Practice Material - 100% Money Back Guarantee!
IT Certification Guaranteed, The Easy Way!

A. YAML
B. JSON
C. EBCDIC
D. XML
E. SGML
Answer: B,D
Explanation:
The Application Policy Infrastructure Controller (APIC) REST API is a programmatic interface that uses
REST architecture. The API accepts and returns HTTP (not enabled by default) or HTTPS messages that
contain JavaScript Object Notation (JSON) or Extensible Markup Language (XML) documents.
Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2-
x/rest_cfg/2_1_x/ b_Cisco_APIC_REST_API_Configuration_Guide/
b_Cisco_APIC_REST_API_Configuration_Guide_chapter_01.html

NO.5 Which type of wireless encryption is used for WPA2 in pre-shared key mode?
A. AES-128
B. RC4
C. TKIP with RC4
D. AES-256
Answer: D
Explanation:
We can see in this picture we have to type 64 hexadecimal characters (256 bit) for the WPA2
passphrase so we can deduce the encryption is AES-256, not AES-128.

Get Latest & Valid 200-301 Exam's Question and Answers 3 from Torrentvce.com. 3
http://www.torrentvce.com/200-301-valid-vce-collection.html
 Instant Download - Best Exam Practice Material - 100% Money Back Guarantee!
IT Certification Guaranteed, The Easy Way!

Reference: https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-
wlan/67134-wpa2-config.html

NO.6 Refer to the exhibit. Which prefix does Router 1 use for traffic to Host A?

Get Latest & Valid 200-301 Exam's Question and Answers 4 from Torrentvce.com. 4
http://www.torrentvce.com/200-301-valid-vce-collection.html
 Instant Download - Best Exam Practice Material - 100% Money Back Guarantee!
IT Certification Guaranteed, The Easy Way!

A. 10.10.13.208/29
B. 10.10.10.0/28
C. 10.10.13.0/25
D. 10.10.13.144/28
Answer: A
Explanation:
The prefix with "longest prefix" will be matched first, in this case is "/29".

NO.7 Drag and Drop Question

Drag and drop the descriptions of file-transfer protocols from the left onto the correct protocols on
the right.

Get Latest & Valid 200-301 Exam's Question and Answers 5 from Torrentvce.com. 5
http://www.torrentvce.com/200-301-valid-vce-collection.html
 Instant Download - Best Exam Practice Material - 100% Money Back Guarantee!
IT Certification Guaranteed, The Easy Way!

Answer:

NO.8 Which set of action satisfy the requirement for multi-factor authentication?
A. The user enters a user name and password, and then clicks a notification in an authentication app
on a mobile device
B. The user enters a user name and password and then re-enters the credentials on a second screen
C. The user enters a PIN into an RSA token, and then enters the displayed RSA key on a login screen
D. The user swipes a key fob, then clicks through an email link
Answer: A
Explanation:
This is an example of how two-factor authentication (2FA) works:
1. The user logs in to the website or service with their username and password.
2. The password is validated by an authentication server and, if correct, the user becomes eligible for
the second factor.
3. The authentication server sends a unique code to the user's second-factor method (such as a
smartphone app).
4. The user confirms their identity by providing the additional authentication for their second-factor
method.

Get Latest & Valid 200-301 Exam's Question and Answers 6 from Torrentvce.com. 6
http://www.torrentvce.com/200-301-valid-vce-collection.html
 Instant Download - Best Exam Practice Material - 100% Money Back Guarantee!
IT Certification Guaranteed, The Easy Way!

NO.9 Refer to the exhibit. Which two statements about the network environment of router R1 must
be true? (Choose two.)

A. A static default route to 10.85.33.14 was defined.

B. Ten routes are equally load-balanced between Te0/1/0.100 and Te0/2/0.100
C. The EIGRP administrative distance was manually changed from 90 to 170.
D. The 10.0.0.0/8 network was learned via external EIGRP.
E. There are 20 different network masks within the 10.0.0.0/8 network.
Answer: B,E

NO.10 Refer to the exhibit. Which VLAN ID is associated with the default VLAN in the given
environment?

Get Latest & Valid 200-301 Exam's Question and Answers 7 from Torrentvce.com. 7
http://www.torrentvce.com/200-301-valid-vce-collection.html
 Instant Download - Best Exam Practice Material - 100% Money Back Guarantee!
IT Certification Guaranteed, The Easy Way!

A. VLAN 20
B. VLAN 1
C. VLAN 10
D. VLAN 5
Answer: B

NO.11 Refer to the exhibit. How will the router handle a packet destined for 192.0.2.156?

A. The router will forward the packet via either Serial0 or Serial1.
B. The router will forward the packet via Serial2.
C. The router will return the packet to its source.
D. The router will drop the packet.

Get Latest & Valid 200-301 Exam's Question and Answers 8 from Torrentvce.com. 8
http://www.torrentvce.com/200-301-valid-vce-collection.html
 Instant Download - Best Exam Practice Material - 100% Money Back Guarantee!
IT Certification Guaranteed, The Easy Way!

Answer: B

NO.12 When a site-to-site VPN is used, which protocol is responsible for the transport of user data?
A. IKEv1
B. MD5
C. IKEv2
D. IPsec
Answer: D
Explanation:
A site-to-site VPN allows offices in multiple fixed locations to establish secure connections with each
other over a public network such as the Internet. A site-to-site VPN means that two sites create a
VPN tunnel by encrypting and sending data between two devices. One set of rules for creating a site-
to-site VPN is defined by IPsec.

NO.13 Refer to the exhibit. Which route does R1 select for traffic that is destined to 192 168.16.2?

A. 192.168.16.0/21
B. 192.168.16.0/24
C. 192.168 26.0/26
D. 192.168.16.0/27
Answer: D
Explanation:
The destination IP addresses match all four entries in the routing table but the 192.168.16.0/27 has
the longest prefix so it will be chosen. This is called the "longest prefix match" rule.

NO.14 Drag and Drop Question

Drag and drop the IPv4 network subnets from the left onto the correct usable host ranges on the
right

Get Latest & Valid 200-301 Exam's Question and Answers 9 from Torrentvce.com. 9
http://www.torrentvce.com/200-301-valid-vce-collection.html
 Instant Download - Best Exam Practice Material - 100% Money Back Guarantee!
IT Certification Guaranteed, The Easy Way!

Answer:

Explanation:
This subnet question requires us to grasp how to subnet very well. To quickly find out the subnet
range, we have to find out the increment and the network address of each subnet. Let's take an
example with the subnet 172.28.228.144/18:
From the /18 (= 1100 0000 in the 3rd octet), we find out the increment is 64. Therefore the network
address of this subnet must be the greatest multiple of the increment but not greater than the value
in the 3rd octet (228). We can find out the 3rd octet of the network address is 192 (because 192 = 64
* 3 and 192 < 228) -> The network address is 172.28.192.0. So the first usable host should be
172.28.192.1 and it matches with the 5th answer on the right. In this case we don't need to calculate
the broadcast address because we found the correct answer.
Let's take another example with subnet 172.28.228.144/23 -> The increment is 2 (as /23 = 1111
1110 in 3rd octet) -> The 3rd octet of the network address is 228 (because 228 is the multiply of 2
and equal to the 3rd octet) -> The network address is 172.28.228.0 -> The first usable host is
172.28.228.1. It is not necessary but if we want to find out the broadcast address of this subnet, we
can find out the next network address, which is 172.28.(228 + the increment number).0 or
172.28.230.0 then reduce 1 bit -> 172.28.229.255 is the broadcast address of our subnet.
Therefore the last usable host is 172.28.229.254.

NO.15 Which statements describe the routing protocol OSPF? (Choose three.)
A. It allows extensive control of routing updates.
B. It is used to route between autonomous systems.
C. It is simpler to configure than RIP v2.

Get Latest & Valid 200-301 Exam's Question and Answers10 from Torrentvce.com. 10
http://www.torrentvce.com/200-301-valid-vce-collection.html
 Instant Download - Best Exam Practice Material - 100% Money Back Guarantee!
IT Certification Guaranteed, The Easy Way!

D. It confines network instability to one area of the network.

E. It increases routing overhead on the network.
F. It supports VLSM.
Answer: A,D,F
Explanation:
The OSPF protocol is based on link-state technology, which is a departure from the Bellman-Ford
vector based algorithms used in traditional Internet routing protocols such as RIP. OSPF has
introduced new concepts such as authentication of routing updates, Variable Length Subnet Masks
(VLSM), route summarization, and so forth.
OSPF uses flooding to exchange link-state updates between routers. Any change in routing
information is flooded to all routers in the network. Areas are introduced to put a boundary on the
explosion of link-state updates. Flooding and calculation of the Dijkstra algorithm on a router is
limited to changes within an area.

NO.16 in Which way does a spine and-leaf architecture allow for scalability in a network when
additional access ports are required?
A. A spine switch and a leaf switch can be added with redundant connections between them
B. A leaf switch can be added with a single connection to a core spine switch.
C. A spine switch can be added with at least 40 GB uplinks
D. A leaf switch can be added with connections to every spine switch
Answer: D
Explanation:
Spine-leaf architecture is typically deployed as two layers: spines (such as an aggregation layer), and
leaves (such as an access layer). Spine-leaf topologies provide high-bandwidth, low-latency,
nonblocking server-to-server connectivity.
Leaf (aggregation) switches are what provide devices access to the fabric (the network of spine and
leaf switches) and are typically deployed at the top of the rack. Generally, devices connect to the leaf
switches.
Devices can include servers, Layer 4-7 services (firewalls and load balancers), and WAN or Internet
routers. Leaf switches do not connect to other leaf switches. In spine-and-leaf architecture, every leaf
should connect to every spine in a full mesh.
Spine (aggregation) switches are used to connect to all leaf switches and are typically deployed at the
end or middle of the row. Spine switches do not connect to other spine switches.
Reference: https://www.cisco.com/c/en/us/products/collateral/switches/nexus-9000-series-
switches/guide-c07-733228.html

Get Latest & Valid 200-301 Exam's Question and Answers11 from Torrentvce.com. 11
http://www.torrentvce.com/200-301-valid-vce-collection.html