Exam 200-301 Topic 1 Question 1369 Discussion - ExamTopics
Uploaded by
Vipul GoyalExam 200-301 Topic 1 Question 1369 Discussion - ExamTopics
Uploaded by
Vipul Goyal2/22/25, 5:33 PM Exam 200-301 topic 1 question 1369 discussion - ExamTopics
Cisco Discussions
Exam 200-301 All Questions
View all questions & answers for the 200-301 exam
Go to Exam
EXAM 200-301 TOPIC 1 QUESTION 1369 DISCUSSION
Actual exam question from Cisco's 200-301
Question #: 1369
Topic #: 1
[All 200-301 Questions]
SIMULATION
Guidelines
This is a lab item in which tasks will be performed on virtual devices
• Refer to the Tasks tab to view the tasks for this lab item.
• Refer to the Topology tab to access the device console(s) and perform the tasks.
• Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.
• All necessary pre-configurations have been applied.
• Do not change the enable password or hostname for any device.
• Save your configurations to NVRAM before moving to the next item.
• Click Next at the bottom of the screen to submit this lab and move to the next question.
• When Next is clicked, the lab closes and cannot be reopened.
Topology
https://www.examtopics.com/discussions/cisco/view/145795-exam-200-301-topic-1-question-1369-discussion/ 1/3
2/22/25, 5:33 PM Exam 200-301 topic 1 question 1369 discussion - ExamTopics
Tasks
Refer to the topology. All physical cabling is in place. Configure local user account, configure a Named ACL (NACL), and Dynamic Arp Inspection.
1. Configure a local account on Sw3 with telnet access only on virtual ports 0-4. Use the following information:
o Username: tech12
o Password: load1key
o Algorithm type: md5
o Privilege level: Exec mode
2. Configure and apply a NACL on R1 to control network traffic towards ISP:
o Name: ISP_ACL
o Restrict RFC 1918 class A and B addresses
o Allow all other addresses
3. A DHCP IP Pool is preconfigured on R1 for VLAN 5, and DHCP Snooping is configured on Sw2. Configure on Sw2:
o Dynamic Arp Inspection for VLAN 5
o Enable validation of the ARP packet destination MAC address
o Enable validation of the ARP packet source MAC address
o Enable validation of the ARP Packet IP address
Show Suggested Answer
by matass_md at Aug. 15, 2024, 6:25 a.m.
Comments
dasand 1 month ago
Task-1
SW3
conf t
https://www.examtopics.com/discussions/cisco/view/145795-exam-200-301-topic-1-question-1369-discussion/ 2/3
2/22/25, 5:33 PM Exam 200-301 topic 1 question 1369 discussion - ExamTopics
username tech12 privilege 15 algorithm-type md5 secret load1key
line vty 0 4
login local
transport input telnet
end
wr
Task-2
R1
conf t
ip access-list extended ISP_ACL
deny 10.0.0.0 0 0.255.255.255 any
deny 172.16.0.0 0.15.255.255 any
permit ip any any
exit
interface e0/1
ip access-group ISP_ACL out
end
wr
Task-3
SW2
conf t
ip arp inspection vlan 5
ip arp inspection validate dst-mac
ip arp inspection validate src-mac
ip arp inspection validate ip
end
wr
upvoted 1 times
MinSun600 5 months, 1 week ago
task 2 the subnet masks are incorrect
upvoted 1 times
matass_md 6 months, 1 week ago
Task 1 and Task 2 are incorrect :
Task 1
username tech12 privilege 15 secret load1key
line vty 0-4
transport input telnet
Task 2 1918 RFC
Class A 10.0.0.0/8 255.0.0.0
Class B 172.16.0.0/12 255.240.0.0
ip access-list standard ISP_ACL
deny 10.0.0.0 0.255.255.255
deny 172.16.0.0 0.15.255.255
permit any
interface e0/1 ip access-group ISP_ACL out
ip arp inspection vlan 5
ip arp validate des-mac
ip arp validate src-mac
ip arp validate ip
upvoted 2 times
MinSun600 5 months, 1 week ago
task 1 you missed
username tech12 privilege 15 the algorithm-type md5 secret load1key
then
sw3(config )#line vty 0 4
sw3(config-line)#login local
sw3(config-line)# transport input telnet
sw3(config-line)# exit
sw3(config)# end
wr memory
upvoted 3 times
gten111 4 months, 3 weeks ago
secret implies it's encrypted by md5
upvoted 4 times
https://www.examtopics.com/discussions/cisco/view/145795-exam-200-301-topic-1-question-1369-discussion/ 3/3
