ベストCisco 200-301学習ガイドと問題集は2025年更新
トップクラスCisco 200-301試験最先端学習ガイド！練習問題バージョン
質問 # 23
Drag and drop the descriptions of file-transfer protocols from the left onto the correct protocols on the right.
正解：
解説：
質問 # 24
What is a function of a southbound API?
- A. Automate configuration changes between a server and a switching fabric
- B. Manage flow control between an SDN controller and a switching fabric
- C. Facilitate the information exchange between an SDN controller and application
- D. Use orchestration to provision a virtual server configuration from a web server
正解：B
質問 # 25
A Cisco IP phone receive untagged data traffic from an attached PC. Which action is taken by the phone?
- A. It tags the traffic with the native VLAN
- B. It tags the traffic with the default VLAN
- C. It drops the traffic
- D. It allows the traffic to pass through unchanged
正解：D
解説：
Explanation
https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2960x/software/15-0_2_EX/vlan/configuration_gui Untagged traffic from the device attached to the Cisco IP Phone passes through the phone unchanged, regardless of the trust state of the access port on the phone.
質問 # 26
Drag and drop the functions from the left onto the correct network components on the right
正解：
解説：
質問 # 27
Drag and drop the Cisco IOS attack mitigation features from the left onto the types of network attack they mitigate on the right.
正解：
解説：
質問 # 28
Which two values or settings must be entered when configuring a new WLAN in the Cisco Wireless LAN Controller GUI? (Choose two.)
- A. management interface settings
- B. SSID
- C. profile name
- D. IP address of one or more access points
- E. QoS settings
正解：B、C
解説：
Section: Network Access
質問 # 29
Refer to the exhibit.
An extended ACL has been configured configuration failed to work as
intended Which two
changes stop outbound traffic on TCP the 10.0.10 0/26 subnet
while still allowing all other traffic?
two )
- A. The ACL must be configured the Gi0/2 interface inbound on R1
- B. The ACL must be moved to the Gi0/1 interface outbound on R2
- C. Add a "permit ip any any" statement to the begining of ACL 101 for allowed traffic.
- D. Add a "permit ip any any" statement at the end of ACL 101 for allowed traffic
- E. The source and destination IPs must be swapped in ACL 101
正解：D、E
質問 # 30 
Refer to the exhibit. An engineer must configure GigabitEthernet1/1 to accommodate voice and data traffic.
Which configuration accomplishes this task?
- A. interface gigabitethernet1/1
switchport mode trunk
switchport trunk vlan 300
switchport voice vlan 400 - B. interface gigabitethernet1/1
switchport mode trunk
switchport trunk vlan 300
switchport trunk vlan 400 - C. interface gigabitethernet1/1
switchport mode access
switchport access vlan 300
switchport voice vlan 400 - D. interface gigabitethernet1/1
switchport mode access
switchport voice vlan 300
switchport access vlan 400
正解：C
解説：
Section: Network Access
質問 # 31
Refer to the exhibit.
An engineer is configuring the router to provide static NAT for the webserver Drag and drop the configuration commands from the left onto the letters that correspond to its position in the configuration on the right.
正解：
解説：
Explanation:
質問 # 32
Refer to the exhibit.
Web traffic is coming in from the WAN interface. Which route takes precedence when the router is processing traffic destined for the LAN network at 10 0.10.0/24?
- A. via next-hop 10.0 1.50
- B. via next-hop 10 0 1.4
- C. via next-hop 10.0.1.5
- D. via next-hop 10.0 1 100
正解：C
質問 # 33
Refer to the exhibit.
Which switch becomes the root bridge?
- A. S2
- B. S1
- C. S4
- D. S3
正解：B
質問 # 34
Drag and drop the SNMP components from the left onto the descriptions on the right.
正解：
解説：
質問 # 35
Drag and drop the 802.11 wireless standards from the left onto the matching statements on the right
正解：
解説：
Explanation
質問 # 36
Which two components are used to identify a neighbor in a BGP configuration? (Choose two.)
- A. subnet mask
- B. router ID
- C. version number
- D. autonomous system number
- E. IP address
正解：D、E
質問 # 37
in Which way does a spine and-leaf architecture allow for scalability in a network when additional access ports are required?
- A. A leaf switch can be added with a single connection to a core spine switch.
- B. A spine switch and a leaf switch can be added with redundant connections between them
- C. A leaf switch can be added with connections to every spine switch
Spine-leaf architecture is typically deployed as two layers: spines (such as an aggregation layer), and leaves (such as an access layer). Spine-leaf topologies provide high-bandwidth, low-latency, nonblocking server-to-server connectivity.
Leaf (aggregation) switches are what provide devices access to the fabric (the network of spine and leaf switches) and are typically deployed at the top of the rack. Generally, devices connect to the leaf switches.
Devices can include servers, Layer 4-7 services (firewalls and load balancers), and WAN or Internet routers. Leaf switches do not connect to other leaf switches. In spine-and-leaf architecture, every leaf should connect to every spine in a full mesh.
Spine (aggregation) switches are used to connect to all leaf switches and are typically deployed at the end or middle of the row. Spine switches do not connect to other spine switches. - D. A spine switch can be added with at least 40 GB uplinks
正解：C
質問 # 38
What is used to identify spurious DHCP servers?
- A. DHCPOFFER
- B. DHCPDISCOVER
- C. DHCPACK
- D. DHCPREQUEST
正解：A
解説：
Explanation
DHCPOFFER is used to identify spurious DHCP servers. A spurious DHCP server is any device that is configured to act as a DHCP server without the network administrator's knowledge or permission. A spurious DHCP server can cause network problems by assigning incorrect or duplicate IP addresses to clients, or by redirecting traffic to malicious gateways. To prevent such attacks, the DHCP snooping feature can be enabled on switches to filter out invalid or unauthorized DHCP messages from untrusted sources1.
DHCP snooping works by intercepting and validating DHCP messages on a per-VLAN basis. The switch maintains a DHCP snooping binding database that contains information about the trusted hosts with leased IP addresses, such as MAC address, IP address, lease time, binding type, VLAN number, and interface information2. The switch also classifies its ports as trusted or untrusted. Trusted ports are those that connect to authorized DHCP servers or other trusted switches. Untrusted ports are those that connect to untrusted hosts or devices. The switch only allows DHCP messages from trusted ports, and drops any DHCP messages from untrusted ports that do not match the information in the binding database3.
The switch uses DHCPOFFER messages to identify spurious DHCP servers. A DHCPOFFER message is a response from a DHCP server to a client's request for an IP address. The message contains the offered IP address, subnet mask, default gateway, and other configuration parameters for the client4. When the switch receives a DHCPOFFER message from an untrusted port, it compares the source MAC address and the offered IP address with the binding database. If there is no match, the switch considers the message as coming from a spurious DHCP server and drops it. The switch also logs an error message and increments a counter for the number of dropped messages5.
References:
1: Configuring DHCP Snooping - Cisco
2: Catalyst 6500 Release 12.2SX Software Configuration Guide - DHCP Snooping Binding Database
3: What is DHCP Snooping? - IONOS
4: Dynamic Host Configuration Protocol (DHCP) and Bootstrap Protocol (BOOTP) Parameters
5: Configuring DHCP Snooping - Cisco
質問 # 39
Refer the exhibit.
What is the cause of poor performance on router R19?
- A. port oversubscription
- B. speed and duplex mismatch
- C. excessive CRC errors
- D. excessive collisions
正解：D
質問 # 40
Which symptom most commonly indicates that two connecting interface are configured with a duplex mismatch?
- A. an interface with down/down state
- B. an interface with up/down state
- C. the spanning tree process shutting down
- D. late collisions on the interface
正解：D
質問 # 41
Drag and drop the SNMP components from the left onto the descriptions on the right.
正解：
解説：
質問 # 42
Refer to the exhibit.
How does the router manage traffic to 192.168.12.16?
- A. It chooses the OSPF route because it has the longest prefix inclusive of the destination address.
- B. It chooses the EIGRP route because it has the lowest administrative distance
- C. It selects the RIP route because it has the longest prefix inclusive of the destination address.
- D. it load-balances traffic between all three routes
正解：C
質問 # 43
......
有効な200-301試験最新問題で2025年最新の学習ガイド：https://jp.fast2test.com/200-301-premium-file.html
200-301認定で究極のガイド：https://drive.google.com/open?id=1lFhK8HKTIJestTg_ex7Bja8KiYw4JLQn