CCNA Cisco Certified Network Associate (Cisco 200-301) Part ll

JavaScript isn't enabled in your browser, so this file can't be opened. Enable and reload.

Email *

Write down your name. *

Write down your contact. *

Q301: A new security policy has been adopted by your company. One of its requirements is that only one host is permitted to attach dynamically to each switch port. The security settings on all of the ports have been altered from the default settings. You execute the following command on all switch ports of Switch A: SwitchA(config-if)# switchport port-security maximum 1 After executing the command, you discover that users in the Sales department are still successfully plugging a hub into a port and then plugging two or three laptops into the hub. What did you do wrong? *

1 point

The command should be executed at the global prompt.

The command should be executed as switchport port-security maximum 0.

You also need to execute the switchport port-security violation shutdown command at the global prompt.

You also need to execute the switchport port-security violation shutdown command on each switch port.

Q302: Which service is denoted by TCP/UDP port number 53? *

1 point

Domain Name Service (DNS)

File Transfer Protocol (FTP)

Telnet

HTTP

Q303: Which of the following is NOT true of APIC-EM? *

1 point

It supports greenfield but not brownfield deployments

It provides a single point for network automation

It saves time and cost

It is open and programmable

Q304: Which two statements represent physical security guidelines that should be followed during Ciscosecurity deployment? (Choose two.) *

1 point

Potential security breaches should be evaluated.

Network equipment should be accessed remotely with Secure Socket Layer (SSL) instead of Telnet.

Images should be managed using File Transfer Protocol (FTP) and Secure FTP (SFTP) instead of Trivial File Transfer Protocol (TFTP).

Simple Network Management Protocol version 3 (SNMPv3) should be used for security and privacy features.

The potential impact of stolen network resources and equipment should be assessed.

Required

Q305: You are configuring a Cisco router. Which command would you use to convey a message regarding the remote access security policy of your organization to a user logging into the router? *

1 point

hostname

banner motd

description

boot system

terminal monitor

Q306: What switch security configuration requires AAA to be configured on the switch? *

1 point

VACL

802.1x

Private VLAN

port security

Q307: Which two features do Cisco routers offer to mitigate distributed denial-of-service (DDoS) attacks? (Choose two.) *

1 point

Anti-DDoS guard

Scatter tracing

Access control lists (ACLs)

Flow control

Rate limiting

Required

Q308: Which statement is TRUE regarding the switchport protected interface configuration command and its effects? *

1 point

The command is used to configure private VLAN edge ports.

The command enables the highest level switch port security.

All the traffic through protected port should go via a Layer 2 device such as switch.

A protected port can directly communicate with any other port on the same switch.

Q309: Which Cisco IOS interface configuration command is used to configure the private VLAN edge ports on a Cisco Catalyst 2950 switch? *

1 point

switchport protected

switchport port-security

switchport port-vlan-edge

switchport port-security violation

Q310: *

1 point

unencrypted privileged mode password

inappropriate wording in the banner message

weak password on the VTY line

Telnet users will not be prompted for a password

Clear form

Never submit passwords through Google Forms.

This content is neither created nor endorsed by Google. Report Abuse - Terms of Service - Privacy Policy

Forms