Improved 200-301 Guidance 2021

NEW QUESTION 1
Which mode must be used to configure EtherChannel between two switches without using a negotiation protocol?

• A. on
• B. auto
• C. active
• D. desirable

Answer: D

NEW QUESTION 2
Which type of wireless encryption is used for WPA2 in preshared key mode?

• A. TKIP with RC4
• B. RC4
• C. AES-128
• D. AES-256

Answer: D

NEW QUESTION 3
An organization has decided to start using cloud-provided services. Which cloud service allows the organization to install its own operating system on a virtual machine?

• A. platform-as-a-service
• B. software-as-a-service
• C. network-as-a-service
• D. infrastructure-as-a-service

Answer: D

NEW QUESTION 4
Which 802.11 frame type is association response?

• A. management
• B. protected frame
• C. control
• D. action

Answer: B

NEW QUESTION 5
Refer to the exhibit.

Drag and drop the networking parameters from the left onto the correct values on the right. Check the answer below.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 6
Refer to the exhibit.

Which route does R1 select for traffic that is destined to 192 168.16.2?

• A. A.-192.168.16.0/21B.192.168.16.0/24C.192.168 26.0/26D.192.168.16.0/27

Answer: B

NEW QUESTION 7
Refer to exhibit.

Which statement explains the configuration error message that is received?

• A. It is a broadcast IP address
• B. The router does not support /28 mask.
• C. It belongs to a private IP address range.
• D. IT is a network IP address.

Answer: A

NEW QUESTION 8
Which feature on the Cisco Wireless LAN Controller when enabled restricts management access from specific networks?

• A. CPUACL
• B. TACACS
• C. Flex ACL
• D. RADIUS

Answer: B

NEW QUESTION 9
Refer to the exhibit.

What is the effect of this configuration?

• A. All ARP packets are dropped by the switch
• B. Egress traffic is passed only if the destination is a DHCP server.
• C. All ingress and egress traffic is dropped because the interface is untrusted
• D. The switch discard all ingress ARP traffic with invalid MAC-to-IP address bindings.

Answer: D

NEW QUESTION 10
Which output displays a JSON data representation?

• A. Option A
• B. Option B
• C. Option C
• D. Option D

Answer: C

NEW QUESTION 11
Which two must be met before SSH can operate normally on a Cisco IOS switch? (Choose two)

• A. The switch must be running a k9 (crypto) IOS image
• B. The Ip domain-name command must be configured on the switch
• C. IP routing must be enabled on the switch
• D. A console password must be configured on the switch
• E. Telnet must be disabled on the switch

Answer: BC

NEW QUESTION 12
Which set of action satisfy the requirement for multifactor authentication?

• A. The user swipes a key fob, then clicks through an email link
• B. The user enters a user name and password, and then clicks a notification in an authentication app on a mobile device
• C. The user enters a PIN into an RSA token, and then enters the displayed RSA key on a login screen
• D. The user enters a user name and password and then re-enters the credentials on a second screen

Answer: A

NEW QUESTION 13
An engineer is asked to protect unused ports that are configured in the default VLAN on a switch. Which two steps will fulfill the request? (Choose two)

• A. Configure the ports in an EtherChannel.
• B. Administratively shut down the ports
• C. Configure the port type as access and place in VLAN 99
• D. Configure the ports as trunk ports
• E. Enable the Cisco Discovery Protocol

Answer: AD

NEW QUESTION 14
Refer to the exhibit.

If configuring a static default route on the router with the ip route 0.0.0.0 0.0.0.0 10.13.0.1 120 command how does the router respond?

• A. It ignores the new static route until the existing OSPF default route is removed
• B. It immediately replaces the existing OSPF route in the routing table with the newly configured static route
• C. It starts load-balancing traffic between the two default routes
• D. It starts sending traffic without a specific matching entry in the routing table to GigabitEthernetO/1

Answer: D

NEW QUESTION 15
A frame that enters a switch fails the Frame Check Sequence. Which two interface counters are incremented? (Choose two)

• A. runts
• B. giants
• C. frame
• D. CRC
• E. input errors

Answer: DE

NEW QUESTION 16
Which design element is a best practice when deploying an 802.11b wireless infrastructure?

• A. disabling TPC so that access points can negotiate signal levels with their attached wireless devices.
• B. setting the maximum data rate to 54 Mbps on the Cisco Wireless LAN Controller
• C. allocating nonoverlapping channels to access points that are in close physical proximity to one another
• D. configuring access points to provide clients with a maximum of 5 Mbps

Answer: C

NEW QUESTION 17
An engineer configured an OSPF neighbor as a designated router. Which state verifies the designated router is in the proper mode?

• A. Exchange
• B. 2-way
• C. Full
• D. Init

Answer: B

NEW QUESTION 18
Refer to Exhibit.

Which action do the switches take on the trunk link?

• A. The trunk does not form and the ports go into an err-disabled status.
• B. The trunk forms but the mismatched native VLANs are merged into a single broadcast domain.
• C. The trunk does not form, but VLAN 99 and VLAN 999 are allowed to traverse the link.
• D. The trunk forms but VLAN 99 and VLAN 999 are in a shutdown state.

Answer: C

NEW QUESTION 19
Which two capacities of Cisco DNA Center make it more extensible? (Choose two)

• A. adapters that support all families of Cisco IOS software
• B. SDKs that support interaction with third-party network equipment
• C. customized versions for small, medium, and large enterprises
• D. REST APIs that allow for external applications to interact natively with Cisco DNA Center
• E. modular design that is upgradable as needed

Answer: BD

NEW QUESTION 20
When a site-to-site VPN is used, which protocol is responsible for the transport of user data?

• A. IKEv2
• B. IKEv1
• C. IPsec
• D. MD5

Answer: C

NEW QUESTION 21
Which configuration is needed to generate an RSA key for SSH on a router?

• A. Configure the version of SSH
• B. Configure VTY access.
• C. Create a user with a password.
• D. Assign a DNS domain name

Answer: B

NEW QUESTION 22
Which action is taken by a switch port enabled for PoE power classification override?

• A. When a powered device begins drawing power from a PoE switch port a syslog message is generated
• B. As power usage on a PoE switch port is checked data flow to the connected device is temporarily paused
• C. If a switch determines that a device is using less than the minimum configured power it assumes the device has failed and disconnects
• D. If a monitored port exceeds the maximum administrative value for power, the port is shutdown and err-disabled

Answer: C

NEW QUESTION 23
......