Cisco Certified Network Associate (200-301 CCNA) – Question241

An engineer requires a switch interface to actively attempt to establish a trunk link with a neighbor switch. What command must be configured?

A.
switchport mode trunk
B. switchport mode dynamic desirable
C. switchport nonegotiate
D. switchport mode dynamic auto

Cisco Certified Network Associate (200-301 CCNA) – Question240

An engineer must configure interswitch VLAN communication between a Cisco switch and a third-party switch.
Which action should be taken?

A.
configure DSCP
B. configure IEEE 802.1q
C. configure ISL
D. configure IEEE 802.1p

Correct Answer: B

Explanation:

Explanation:
VLAN trunking offers two options, ISL and 802.1Q. ISL is Cisco proprietary while 802.1Q is standards based and supported by multiple vendors.

Cisco Certified Network Associate (200-301 CCNA) – Question239

Which protocol prompts the Wireless LAN Controller to generate its own local web administration SSL certificate for GUI access?

A.
RADIUS
B. HTTPS
C. TACACS+
D. HTTP

Correct Answer: B

Explanation:

Explanation:
You can protect communication with the GUI by enabling HTTPS. HTTPS protects HTTP browser sessions by using the Secure Sockets Layer (SSL) protocol. When you enable HTTPS, the controller generates its own local web administration SSL certificate and automatically applies it to the GUI. You also have the option of downloading an externally generated certificate.
Reference:
https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-0/confi…

Cisco Certified Network Associate (200-301 CCNA) – Question237


Refer to the exhibit. Which password must an engineer use to enter the enable mode?

A.
adminadmin123
B. cisco123
C. default
D. testing1234

Correct Answer: D

Explanation:

Explanation:
If neither the enable password command nor the enable secret command is configured, and if there is a line password configured for the console, the console line password serves as the enable password for all VTY sessions -> The “enable secret” will be used first if available, then “enable password” and line password.

Cisco Certified Network Associate (200-301 CCNA) – Question236

Which two conditions must be met before SSH operates normally on a Cisco IOS switch? (Choose two.)

A.
IP routing must be enabled on the switch.
B. A console password must be configured on the switch.
C. Telnet must be disabled on the switch.
D. The switch must be running a k9 (crypto) IOS image.
E. The ip domain-name command must be configured on the switch.

Cisco Certified Network Associate (200-301 CCNA) – Question235

How will Link Aggregation be implemented on a Cisco Wireless LAN Controller?

A.
The EtherChannel must be configured in "mode active".
B. When enabled, the WLC bandwidth drops to 500 Mbps.
C. To pass client traffic, two or more ports must be configured.
D. One functional physical port is needed to pass client traffic.

Cisco Certified Network Associate (200-301 CCNA) – Question234

The SW1 interface g0/1 is in the down/down state. What are two reasons for the interface condition? (Choose two.)

A.
There is a protocol mismatch
B. There is a duplex mismatch
C. The interface is shut down
D. The interface is error-disabled
E. There is a speed mismatch

Correct Answer: DE

Explanation:

Explanation:
The interface is shut down – ADMIN DOWN / DOWN
The interface is error-disabled – DOWN / DOWN
There is a speed mismatch – DOWN / DOWN

Cisco Certified Network Associate (200-301 CCNA) – Question233

What is a difference between local AP mode and FlexConnect AP mode?

A.
Local AP mode creates two CAPWAP tunnels per AP to the WLC
B. Local AP mode causes the AP to behave as if it were an autonomous AP
C. FlexConnect AP mode fails to function if the AP loses connectivity with the WLC
D. FlexConnect AP mode bridges the traffic from the AP to the WLC when local switching is configured

Correct Answer: A

Cisco Certified Network Associate (200-301 CCNA) – Question232

What is the difference between RADIUS and TACACS+?

A.
RADIUS logs all commands that are entered by the administrator, but TACACS+ logs only start, stop, and interim commands.
B. TACACS+ separates authentication and authorization, and RADIUS merges them.
C. TACACS+ encrypts only password information, and RADIUS encrypts the entire payload.
D. RADIUS is most appropriate for dial authentication, but TACACS+ can be used for multiple types of authentication.

Correct Answer: B