Cisco
200-301 Exam
Questions

Implementing and Administering Cisco Solutions 200-301

Cisco (200-301) Exam Questions And Answers page 73

Which protocol option should you choose to encrypt and transmit data between peer routers with high confidentiality?

Single Choice

You want to encrypt and transmit data between peer routers with high confidentiality. Which protocol option should you choose?

Authentication Header (AH) in tunnel mode

Authentication Header (AH) in transport mode

Encapsulating Security Payload (ESP) in tunnel mode

Encapsulating Security Payload (ESP) in transport mode

IP Services Security Fundamentals

Correct Answer:

Encapsulating Security Payload (ESP) in tunnel mode

Explanation:

You should choose Encapsulating Security Payload (ESP) in tunnel mode to encrypt and transmit data between peer routers with high confidentiality. Two protocols can be used to build tunnels and protect data traveling across the tunnel:
• Authentication Header (AH) uses protocol 51.
• ESP uses protocol 50.
AH is defined in Request for Comments (RFC) 1826 and 2402. AH does not perform data encryption and therefore, information is passed as clear text. The purpose of AH is to provide data integrity and authentication, and anti-reply service (optional). It ensures that a packet that crosses the tunnel is the same packet that left the peer device and no changes have been made. It uses a keyed hash to accomplish this.
ESP is defined in RFC 2406. ESP can provide data integrity and authentication, but its primary purpose is to encrypt data crossing the tunnel. There are two reasons why ESP is the preferred building block of IPSec tunnels:
• The authentication component of ESP does not include any Layer 3 information. Therefore, this component can work in conjunction with a network using Network Address Translation (NAT).
• On Cisco devices, ESP supports encryption using Advanced Encryption Standard (AES), Data Encryption Standard (DES), or Triple DES (3DES).
Tunnel mode is used between Virtual Private Network (VPN) gateways such as routers, firewalls, and VPN concentrators.
Transport mode is used between end-stations or between an end-station and a VPN gateway.
The options AH in tunnel mode and AH in transport mode are incorrect because AH does not provide encryption.
The option ESP in transport mode is incorrect because transport mode is used between end-stations or between an end-stations and a VPN gateway.
Objective:
WAN Technologies
Sub-Objective:
Describe WAN access connectivity options
Cisco > Articles > Network Technology > General Networking > IPSec Overview Part Two: Modes and Transforms
Cisco > The Internet Protocol Journal > The Internet Protocol Journal - Volume 3, No. 1, March 2000 > IP Security

How can access to the web server via HTTP be blocked for computers on VLAN 20 in switch A?

Single Choice

Refer to the exhibit. A network engineer must block access for all computers on VLAN 20 to the web server via HTTP. All other computers must be able to access the web server. Which configuration when applied to switch A accomplishes the task?

Network Access IP Services

What is a characteristic of spine-and-leaf architecture in networking?

Single Choice

What is a characteristic of spine-and-leaf architecture?

Each link between leaf switches allows for higher bandwidth.

It provides greater predictability on STP blocked ports.

It provides variable latency.

Each device is separated by the same number of hops.

IP Connectivity Automation and Programmability

Which routing protocols are considered classless?

Multiple Choice

Which of the following are classless routing protocols? (Choose four.)

Open Shortest Path First (OSPF)

Enhanced Interior Gateway Routing Protocol (EIGRP)

Interior Gateway Routing Protocol (IGRP)

Routing Information Protocol version 1 (RIPv1)

Border Gateway Protocol (BGP)

Routing Information Protocol version 2 (RIPv2)

IP Connectivity IP Services

Correct Answers:

Open Shortest Path First (OSPF)
Enhanced Interior Gateway Routing Protocol (EIGRP)
Border Gateway Protocol (BGP)
Routing Information Protocol version 2 (RIPv2)

Explanation:

Open Shortest Path First (OSPF), Enhanced Interior Gateway Routing Protocol (EIGRP), Border Gateway Protocol (BGP), and Routing Information Protocol version 2 (RIPv2) are classless routing protocols.
Intermediate-System-to-Intermediate System (IS-IS) is also a classless routing protocol.
The options IGRP and RIPv1 are incorrect because these are classful routing protocols.
The following are characteristics of classless routing protocols:
• The subnet mask is advertised with each route by using classless routing protocols.
• Flexible route summarization and supernetting (CIDR) are allowed in classless routing protocols.
• Classless routing protocols support variable length subnet masks (VLSM), which allow different subnets of a given IP network to be configured with different subnet masks.
One of the main advantages of using a classless routing protocol is its ability to minimize the effects of discontiguous networks. When subnets of the same classful network are separated by another classful network, the networks are called discontiguous. Examine the diagram below:

The LAN networks extending from Router A and Router B are derived from the same Class C network, 192.168.1.0/24. A classful routing protocol such as RIP v1 would not be able to determine the direction to send the packets, but since classless protocols include the subnet mask in advertisements, they would not suffer the same problem. Whenever networks with non-default subnet masks are used, a classless routing protocol will be required.
Below are some examples of networks that do not have default masks. You can recognize them by the fact that they are not /8, /16, or /24.
192.168.10.0/27
10.5.6.0/22
172.68.0.0/18
All of the classless protocols discussed here are interior routing protocols with the exception of Border Gateway Protocol (BGP), which is an external routing protocol used to connect different autonomous systems. For example, BGP would be used to connect two OSPF autonomous systems (AS).
Objective:
Routing Fundamentals
Sub-Objective:
Interpret the components of routing table
Cisco > Support > IP > IP Routing

What is the OSPF router-ID used by router R1?

Single Choice

Refer to the exhibit. What does router R1 use as its OSPF router-ID?

10.10.1.10

10.10.10.20

172.16.15.10

192.168.0.1

IP Connectivity Security Fundamentals

What commands can be used to determine the IP address and hostname of a directly connected switch?

Multiple Choice

Which commands would you use to determine the IP address and hostname of a directly connected switch from which you received VLAN information? (Choose two. Each correct answer is part of the solution.)

show vtp status

show cdp neighbors detail

show cdp neighbor status

show vtp counters

show cdp neighbor

Network Access IP Connectivity

Correct Answers:

show vtp status
show cdp neighbors detail

Explanation:

The VLAN Trunking Protocol (VTP) is used to synchronize VLANs between switches, and the question implies that VTP is being used in this environment. The show vtp status command will display the IP address of the switch that last updated your VLAN database. The output of this command is as follows:

The "Configuration last modified by 10.1.1.2" output reveals the IP address of the switch from which you received VLAN information. Once you know the IP address of the switch, you can use the show cdp neighbors detail command to determine the hostname associated with this IP address. The output of this command is as follows:

The show cdp neighbors detail command provides detailed information about directly connected Cisco devices. The detail option is required to provide the IP address of the neighboring devices, and indicates here that IP address 10.1.1.2 is assigned to Device ID: SwitchB, which is the hostname for this device. SwitchB is the switch from which you received VLANs.
Although not offered as an option, the show cdp entry* command will also display all directly connected devices and will indicate the hostname and the IP address and platform, but will not indicate from which device VTP information was received. Its output is shown below:

This command displays the same information as the show cdp neighbor detail command. It includes:
• The IP address of the neighbor (in this case 10.1.1.2)
• The port on which the CDP information was received (in this case FastEthernet0/4)
• The platform (in this case a Cisco WS-C2950G-24 Switch)
The show vtp counters command is incorrect because it does not display information about neighboring devices, nor information regarding from which switch VLANs were received.
The show cdp neighbor command is incorrect because the detail option is required to display the IP addresses of neighboring devices.
The show cdp neighbor status command is incorrect because this is not a valid Cisco IOS command.
Objective:
LAN Switching Fundamentals
Sub-Objective:
Configure, verify, and troubleshoot VLANs (normal/extended range) spanning multiple switches
References:

What type of cable is used to connect a router to a switch?

Single Choice

Which of the following cables would be used to connect a router to a switch?

v.35

crossover

rollover

straight-through

Network Access IP Connectivity

Correct Answer:

straight-through

Explanation:

A straight-through cable would be used. When connecting "unlike" devices, such as a switch to a router, a straight-through cable is used. This is a cable where the wires are in the same sequence at both ends of the cable.
NOTE: The one exception to this general rule of connecting unlike devices with a straight-through cable is when a computer NIC is connected to an Ethernet port on a router. In that case, a crossover cable is used.
A v.35 cable is used to connect serial connections between routers. This cable has a male DB-60 connector on the Cisco end and a male Winchester connector on the network end. It comes in two types: DCE and DTE. It is often used to simulate a WAN connection in lab environments. In that case, the DCE end acts as the CSU/DSU and is the end where the clock rate is set. A CSU/DSU (Channel Service Unit/Data Service Unit) is a device that connects the router to the T1 or T3 line.
A crossover cable has two wires reversed and is used to connect "like" devices, such as a switch to a switch. It is also used when a computer NIC is connected to an Ethernet port on a router.
A rollover cable is used to connect to the console port of a router to configure the router. It is also called a console cable.
The diagram below illustrates the correct usage of each of the cable types shown using the following legend:
• SO Ethernet Straight through Cable
• CO Ethernet Crossover Cable
• Serial Serial cable
• RO Rollover cable

Objective:
Network Fundamentals
Sub-Objective:
Select the appropriate cabling type based on implementation requirements
Cisco > Product Support > Routers > Cisco 1000 Series Routers > 5-in-1 V.35 Assembly and Pinouts > Document ID: 46803
Cisco > Tech Notes > Cabling Guide for Console and AUX Ports > Document ID: 12223

To which destination does router R1 send the packet?

Single Choice

Refer to the exhibit. A packet is being sent across router R1 to host 172.16.3.14. To which destination does the router send the packet?

207.165.200.246 via Serial0/1/0

207.165.200.254 via Serial0/0/0

207.165.200.250 via Serial0/0/0

207.165.200.254 via Serial0/0/1

Network Access IP Connectivity

What causes late collisions to increase on an Ethernet interface? (Choose two reasons)

Multiple Choice

What are two reasons that cause late collisions to increment on an Ethernet interface? (Choose two.)

when Carrier Sense Multiple Access/Collision Detection is used

when one side of the connection is configured for half-duplex

when the sending device waits 15 seconds before sending the frame again

when a collision occurs after the 32nd byte of a frame has been transmitted

when the cable length limits are exceeded

Network Access Security Fundamentals

What is the media access control method used by Ethernet technology to minimize collisions?

Single Choice

Which media access control method is used by Ethernet technology to minimize collisions in the network?

CSMA/CD

token passing

back-on algorithm

full-duplex

Network Access Security Fundamentals

Previous Questions

Next Questions

Cisco (200-301) Exam Questions And Answers page 73

Which protocol option should you choose to encrypt and transmit data between peer routers with high confidentiality?

Correct Answer:

Explanation:

Comments

How can access to the web server via HTTP be blocked for computers on VLAN 20 in switch A?

Comments

What is a characteristic of spine-and-leaf architecture in networking?

Comments

Which routing protocols are considered classless?

Correct Answers:

Explanation:

Comments

What is the OSPF router-ID used by router R1?

Correct Answer:

Explanation:

Comments

What commands can be used to determine the IP address and hostname of a directly connected switch?

Correct Answers:

Explanation:

Comments

What type of cable is used to connect a router to a switch?

Correct Answer:

Explanation:

Comments

To which destination does router R1 send the packet?

Correct Answer:

Explanation:

Comments

What causes late collisions to increase on an Ethernet interface? (Choose two reasons)

Correct Answers:

Explanation:

References:

Comments

What is the media access control method used by Ethernet technology to minimize collisions?

Correct Answer:

Explanation:

Comments

{{ exam.shortName }}

{{ exam.longName }}