200-301無料更新100%試験合格率保証 [2023]
[2023年05月] 認証されたCisco試験問題集で200-301試験学習ガイド
シスコ200-301試験は、ネットワークのキャリアを追求したい人や既存のネットワークスキルを向上させたい人に最適です。この試験は、ネットワーク管理者、ネットワークエンジニア、ネットワーク技術者、そしてコンピューターネットワークの管理と維持に責任を持つすべての人に適しています。
質問 # 141
Which attribute does a router use to select the best path when two or more different routes to the same destination exist from two different routing protocols.
- A. administrative distance
- B. dual algorithm
- C. metric
- D. hop count
正解：A
解説：
Explanation
Administrative distance is the feature used by routers to select the best path when there are two or more different routes to the same destination from different routing protocols. Administrative distance defines the reliability of a routing protocol.
質問 # 142
Refer to Exhibit.
The loopback1 interface of the Atlanta router must reach the loopback3 interface of the Washington router.
Which two static host routes must be configured on the NEW York router? (Choose two)
- A. ipv6 route 2000::1/128 s0/0/1
- B. ipv6 route 2000::3/128 2023::3
- C. ipv6 route 2000::3/128 s0/0/0
- D. ipv6 route 2000::1/128 2012::1
- E. ipv6 route 2000::1/128 2012::2
正解：B、D
質問 # 143
What is the expected outcome when an EUI-64 address is generated?
- A. The characters FE80 are inserted at the beginning of the MAC address of the interface
- B. The MAC address of the interface is used as the interface ID without modification
- C. The seventh bit of original MAC address of the interface is inverted
- D. The interface ID is configured as a random 64-bit value
正解：C
解説：
The EUI-64 format interface ID is derived from the 48-bit MAC address by inserting the hexadecimal number fffe between the upper 3 bytes (OUI field) and the lower 3 vendor assigned bytes of the MAC address. Then, the seventh bit of the first octet is inverted. (In a MAC address, this bit indicates the scope and has a value of 1 for global scope and 0 for local scope; it will be 1 for globally unique MAC addresses. In the EUI-64 format, the meaning of this bit is opposite, so the bit is inverted.)
質問 # 144
Refer to the exhibit.
Which switch becomes the root bridge?
- A. S1
- B. S2
- C. S4
- D. S3
正解：A
質問 # 145 
Refer to the exhibit. Router R2 is configured with multiple routes to reach network 10.1.1.0/24 from router R1.
Which path is chosen by router R2 to reach the destination network 10.1.1.0/24?
- A. OSPF
- B. static
- C. eBGP
- D. EIGRP
正解：B
解説：
Section: IP Connectivity
質問 # 146
Drag and drop the IPv4 network subnets from the left onto the correct usable host ranges on the right
正解：
解説：
質問 # 147
Which two correctly describe steps in the OSI data encapsulation process? (Choose two.)
- A. Packets are created when the network layer adds Layer 3 addresses and control information to a segment.
- B. The transport layer divides a data stream into segments and may add reliability and flow control information.
- C. The data link layer adds physical source and destination addresses and an FCS to the segment.
- D. Packets are created when the network layer encapsulates a frame with source and destination host addresses and protocol-related control information.
- E. The presentation layer translates bits into voltages for transmission across the physical link.
正解：A、B
質問 # 148
Which two spanning-tree port states does RSTP combine to allow faster convergence? (Choose two.)
- A. blocking
- B. forwarding
- C. learning
- D. discarding
- E. listening
正解：A、E
質問 # 149
Refer to the exhibit.
Which two commands were used to create port channel 10? (Choose two )
- A. Option B
- B. Option A
- C. Option D
- D. Option E
- E. Option C
正解：B、E
質問 # 150
Refer to the exhibit.
What commands are needed to add a subinterface to Ethernet0/0 on R1 to allow for VLAN 20, with IP address
10.20.20.1/24?
- A. R1(config)#interface ethernet0/0
R1(config)#ip address 10.20.20.1 255.255.255.0 - B. R1(config)#interface ethernet0/0.20
R1(config)#encapsulation dot1q 20
R1(config)#ip address 10.20.20.1 255.255.255.0 - C. R1(config)#interface ethernet0/0
R1(config)#encapsulation dot1q 20
R1(config)#ip address 10.20.20.1 255.255.255.0 - D. R1(config)#interface ethernet0/0.20
R1(config)#ip address 10.20.20.1 255.255.255.0
正解：B
質問 # 151
Refer to the exhibit. An engineer assigns IP addressing to the current VLAN with three PCs. The configuration must also account for the expansion of 30 additional VLANS using the same Class C subnet for subnetting and host count. Which command set fulfills the request while reserving address space for the expected growth?
- A. Switch(config)#interface vlan 10
Switch(config-if)#ip address 192.168.0.1 255.255.255.128 - B. Switch(config)#interface vlan 10
Switch(config-if)#ip address 192.168.0.1 255 255.255.248 - C. Switch(config)#interface vlan 10
Switch(config-if)#ip address 192.168.0.1 265 255.255.252 - D. Switch(config)#interface vlan 10
Switch(config-if)#ip address 192.168.0.1 255 255.255.0
正解：B
質問 # 152
Refer to the exhibit.
Router R2 is configured with multiple routes to reach network 10 1.1 0/24 from router R1. What protocol is chosen by router R2 to reach the destination network 10.1 1 0/24?
- A. OSPF
- B. static
- C. eBGP
- D. EIGRP
正解：B
質問 # 153
What are two benefits of using the PortFast feature? (Choose two)
- A. Enabled interfaces come up and move to the forwarding state immediately
- B. Enabled interfaces wait 50 seconds before they move to the forwarding state
- C. Enabled interfaces never generate topology change notifications.
- D. Enabled interfaces that move to the learning state generate switch topology change notifications
- E. Enabled interfaces are automatically placed in listening state
正解：A、C
解説：
"A switch will never generate a topology change notification for an interface that has portfast enabled."
https://networklessons.com/switching/cisco-portfast-configuration
"Another major benefit of the STP portfast feature is that the access ports bypass the earlier
802.1D STP states (learning and listening) and forward traffic immediately."
https://www.ciscopress.com/articles/article.asp?p=2995351&seqNum=3
質問 # 154
Drag and drop the descriptions from the left onto the configuration-management technologies on the right.
正解：
解説：
Explanation:
Ansible: - uses SSH for remote device communication - uses YAML for fundamental configuration elements Chef: - uses TCP port 10002 for configuration push jobs - uses Ruby for fundamental configuration elements Puppet: - fundamental configuration elements are stored in a manifest - uses TCP 8140 for communication The focus of Ansible is to be streamlined and fast, and to require no node agent installation. Thus, Ansible performs all functions over SSH. Ansible is built on Python, in contrast to the Ruby foundation of Puppet and Chef. TCP port 10002 is the command port. It may be configured in the Chef Push Jobs configuration file . This port allows Chef Push Jobs clients to communicate with the Chef Push Jobs server. Puppet is an open-source configuration management solution, which is built with Ruby and offers custom Domain Specific Language (DSL) and Embedded Ruby (ERB) templates to create custom Puppet language files, offering a declarative-paradigm programming approach. A Puppet piece of code is called a manifest, and is a file with .pp extension.
質問 # 155
Drag and drop the use cases for device-management technologies from the left onto the corresponding.
正解：
解説：
質問 # 156
Drag and drop the threat-mitigation techniques from the left onto the types of threat or attack they mitigate on the right.
正解：
解説：
Explanation:
When the packet from the attacker reaches Switch A, Switch A only sees the first VLAN 10 and it matches with its native VLAN 10 so this VLAN tag is removed. Switch A forwards the frame out all links with the same native VLAN 10. Switch B receives the frame with an tag of VLAN 20 so it removes this tag and forwards out to the Victim computer.
Note: This attack only works if the trunk (between two switches) has the same native VLAN as the attacker.
To mitigate this type of attack, you can use VLAN access control lists (VACLs, which applies to all traffic within a VLAN. We can use VACL to drop attacker traffic to specific victims/servers) or implement Private VLANs.
ARP attack (like ARP poisoning/spoofing) is a type of attack in which a malicious actor sends falsified ARP messages over a local area network as ARP allows a gratuitous reply from a host even if an ARP request was not received. This results in the linking of an attacker's MAC address with the IP address of a legitimate computer or server on the network. This is an attack based on ARP which is at Layer 2.
Dynamic ARP inspection (DAI) is a security feature that validates ARP packets in a network which can be used to mitigate this type of attack.
質問 # 157
Which syslog severity level is considered the most severe and results in the system being considered unusable?
- A. Emergency
- B. Critical
- C. Error
- D. Alert
正解：A
質問 # 158
Which two encoding methods are supported by REST APIs? (Choose two)
- A. XML
- B. EBCDIC
- C. YAML
- D. SGML
- E. JSON
正解：A、C
質問 # 159
Which type of information resides on a DHCP server?
- A. a list of the available IP addresses in a pool
- B. usernames and passwords for the end users in a domain
- C. a list of statically assigned MAC addresses
- D. a list of public IP addresses and their corresponding names
正解：A
質問 # 160
Drag and drop the characteristics of transport layer protocols from the left onto the corresponding protocols on the right.
正解：
解説：
質問 # 161
Refer to the exhibit.
An administrator is tasked with configuring a voice VLAN. What is the expected outcome when a Cisco phone is connected to the GigabitEfriemet3/1/4 port on a switch?
- A. The phone sends and receives data in VLAN 50, but a workstation connected to the phone sends and receives data in VLAN 1
- B. The phone and a workstation that is connected to the phone do not have VLAN connectivity
- C. The phone and a workstation that is connected to the phone send and receive data in VLAN 50.
- D. The phone sends and receives data in VLAN 50, but a workstation connected to the phone has no VLAN connectivity
正解：A
質問 # 162
Which field within the access-request packet is encrypted by RADIUS?
- A. username
- B. authenticator
- C. password
- D. authorized services
正解：C
解説：
RADIUS by itself provides no encryption of all traffic. It protects only a small part of the traffic, notably the passwords.
質問 # 163
Drag and drop the SNMP components from the left onto the descriptions on the right.
正解：
解説：
質問 # 164
Refer to the exhibit.
An administrator must configure interfaces Gi1/1 and Gi1/3 on switch SW11 PC-1 and PC-2 must be placed in the Data VLAN and Phone-1 must be placed in the Voice VLAN Which configuration meets these requirements?
- A. Option B
- B. Option D
- C. Option C
- D. Option A
正解：C
質問 # 165
......
シスコ200-301認定試験は、ネットワーク分野でのキャリアの開始または発展を目指す個人にとって貴重な認定資格です。この認定は、ネットワークの基礎、セキュリティ、自動化、およびプログラマビリティにおける候補者の知識とスキルを検証します。ネットワークデバイスの構成とトラブルシューティング能力をテストする包括的な試験であり、ネットワーク分野での高度な認定を追求するための堅固な基礎を提供します。
正真正銘のベスト試験材料は200-301オンライン練習試験：https://jp.fast2test.com/200-301-premium-file.html
200-301テストエンジン練習試験：https://drive.google.com/open?id=1NCmQTMO8Fu-PqBjX6AcA7g9SJe2IiKga