mcAfee Secure Website
23

Cisco 200-301 Bundle

Exam Code: 200-301

Exam Name Cisco Certified Network Associate (CCNA)

Certification Provider: Cisco

Corresponding Certification: CCNA

200-301 Training Materials $44.99

Reliable & Actual Study Materials for 200-301 Exam Success

The Latest 200-301 Exam Questions as Experienced in the Actual Test!

  • 24
    Questions & Answers

    200-301 Questions & Answers

    760 Questions & Answers

    Includes questions types found on actual exam such as drag and drop, simulation, type in, and fill in the blank.

  • 25
    200-301 Video Course

    200-301 Training Course

    271 Video Lectures

    Based on Real Life Scenarios which you will encounter in exam and learn by working with real equipment.

  • exam =30
    Study Guide

    200-301 Study Guide

    1969 PDF Pages

    Study Guide developed by industry experts who have written exams in the past. They are technology-specific IT certification researchers with at least a decade of experience at Fortune 500 companies.

exam =32

Cisco Certified Network Associate (CCNA) (200-301) Practice Tests

Guarantee

Satisfaction Guaranteed

Pass4sure has a remarkable Cisco Candidate Success record. We're confident of our products and provide no hassle product exchange. That's how confident we are!

99.3% Pass Rate
Total Cost: $194.97
Bundle Price: $149.98

Purchase Individually

  • exam =34
    Questions & Answers

    Questions & Answers

    760 Questions

    $124.99
    exam =35
  • exam =37
    200-301 Video Course

    Training Course

    271 Video Lectures

    $39.99
  • exam =36
    Study Guide

    Study Guide

    1969 PDF Pages

    $29.99

Cisco 200-301 Practice Test 17

Question 160

An access switch advertises too much information about its device identity on an untrusted publicly exposed Ethernet jack. The security team wants to stop sending Cisco Discovery Protocol advertisements on that port while keeping CDP elsewhere. Which change is scoped correctly?

  1. Use `no cdp enable` on the exposed interface.
  2. Disable SSH remote management on every switch.
  3. Use `no cdp run` globally.
  4. Disable the native VLAN on every trunk.

Explanation

Correct Answer

A:

Cisco discovery advertisement can reveal device and port information to directly connected neighbors. Interface-scoped `no cdp enable` stops CDP on that one interface without globally disabling discovery on trusted infrastructure links. Verify operational behavior because security posture depends on other enabled discovery mechanisms too.

Incorrect Answers

B:

SSH governs remote command access, not local CDP frame transmission. Removing SSH would make management harder without suppressing discovery advertisements.

C:

This disables CDP throughout the device, not only on the exposed interface. It may satisfy suppression but unnecessarily removes useful discovery on trusted links.

D:

Native VLAN handling affects Ethernet tagging, not whether the access port sends CDP neighbor frames. It is an unrelated broad disruption.

Question 161

A Cisco switch has CDP and LLDP enabled, and a multivendor security appliance supports LLDP but not CDP. Which behavior should the switch expect on the shared link?

  1. The switch must disable all CDP globally before any LLDP peer can be learned.
  2. The appliance must run OSPF to be visible as an LLDP neighbor.
  3. The switch must map the LLDP peer into a static MAC address entry first.
  4. It can learn the appliance through LLDP even though no CDP advertisement is received from that peer.

Explanation

Correct Answer

D:

Cisco platforms can support more than one link-local neighbor discovery protocol at the same time. A standards-based LLDP-capable appliance can advertise to the switch despite lacking Cisco proprietary CDP support. Verify interface transmit/receive state and keep security policy for exposed links in mind.

Incorrect Answers

A:

CDP and LLDP can coexist on supported Cisco platforms. A CDP configuration does not automatically prohibit learning independent LLDP frames.

B:

LLDP is a Layer 2 advertisement protocol and does not require participation in a Layer 3 routing process. Firewall routing does not govern LLDP identity frames.

C:

LLDP advertisements themselves provide chassis and port identities. A manually pinned MAC forwarding entry is not normally required for neighbor discovery.

Question 162

Cisco IOS reports an LLDP neighbor but the operator needs to inspect locally enabled interface transmit/receive state. Which verification approach best addresses the task?

  1. Inspect `show lldp` and interface-specific LLDP status/neighbor details.
  2. Inspect `show ip ospf database` for the LLDP transmitter state.
  3. Inspect the NAT translation table only.
  4. Inspect the running DHCP pool only.

Explanation

Correct Answer

A:

Operational LLDP show commands reveal whether the process and interfaces are participating in advertisement and reception. Neighbor detail output provides the peer facts that were learned. This separates configuration state from the mere presence of IP connectivity or VLAN transport.

Incorrect Answers

B:

OSPF LSDB output contains routed topology LSAs, not LLDP interface transmit/receive toggles. OSPF and LLDP are unrelated discovery planes.

C:

NAT translations show address mapping for IP flows and do not describe local LLDP interface state. The question asks for LLDP operational verification.

D:

DHCP server configuration controls leases and client parameters, not LLDP advertisement capability. A functioning lease does not confirm neighbor discovery.

Question 163

A campus operator needs the IPv4 management address and detailed platform information advertised by a directly attached CDP-enabled Cisco switch. Which command is most directly suited?

  1. `show cdp neighbors detail`.
  2. `show running-config interface vlan 1` on the local switch.
  3. `show cdp neighbors` only.
  4. `show mac address-table dynamic`.

Explanation

Correct Answer

A:

The detail form of the CDP neighbor display includes expanded information such as device ID, platform details and advertised management addresses when present. It works for CDP-compatible peers that have exchanged advertisements. The compact neighbor view may show ports without all available IP address details.

Incorrect Answers

B:

The local SVI configuration is not a view of the remote neighbor’s advertised management address. The neighbor details are carried in CDP packets.

C:

The brief output is useful for device/port mapping but commonly omits some expanded management address and platform details. The request explicitly asks for the detailed advertisement.

D:

The MAC table maps learned source hardware addresses to local ports, not the remote device identity and management addressing details found in CDP.

Question 164

Two Cisco switches are connected through a transparent Layer 2 trunk. CDP lists one directly attached neighbor but not a third switch beyond it. What discovery scope should be expected?

  1. CDP must traverse every router as a routed control packet.
  2. CDP provides the same forwarding path as a traceroute with IP TTL expiry.
  3. CDP normally describes directly connected compatible neighbors, not an entire multihop path.
  4. CDP automatically computes OSPF routes to all discovered chassis.

Explanation

Correct Answer

C:

CDP frames are link-local and normally identify neighbors immediately attached to the receiving interface. It is not a routed path-discovery protocol across arbitrary intermediate devices. To map multiple hops, collect adjacent-neighbor information from the other switches or use separate topology management.

Incorrect Answers

A:

CDP is a Layer 2 local-neighbor protocol and is not normally forwarded through routers. Multihop reachability does not mean CDP reachability.

B:

Traceroute discovers Layer 3 hops using expiring probe packets; CDP sees link-local neighbors. These tools operate at different layers.

D:

CDP advertises local adjacency metadata; it does not install routes or participate in OSPF SPF calculations. Layer 3 routing remains separate.

Question 165

A vendor-neutral network management system must distinguish LLDP chassis ID from port ID. Which statement is accurate?

  1. Chassis ID is always the IPv4 default gateway while port ID is the DNS name.
  2. The port ID identifies the whole network segment, and chassis ID is the VLAN number.
  3. Chassis ID is a learned route and port ID is the next-hop metric.
  4. The chassis ID identifies the advertising device while the port ID identifies its participating interface.

Explanation

Correct Answer

D:

LLDP carries separate identifiers for the transmitting chassis and specific port that emitted the advertisement. This lets management correlate different interfaces on one device without treating them as separate chassis. Additional management addresses and capabilities can appear as optional information elements.

Incorrect Answers

A:

Those are not mandated semantics for LLDP chassis and port identifiers. LLDP defines identity fields independent of gateway routing and DNS resolution.

B:

A port ID identifies the advertiser’s interface. A VLAN ID is segmentation metadata, not the device chassis identifier.

C:

LLDP is a Layer 2 neighbor protocol, not a routing table encoding. Routing prefixes and metrics have different representations.

Question 166

A switch receives Cisco discovery advertisements from its directly connected Cisco router but the operations team needs a CLI summary of neighbor device IDs and local interfaces. Which command is appropriate?

  1. `show interfaces trunk`.
  2. `show spanning-tree root`.
  3. `show ip route`.
  4. `show cdp neighbors`.

Explanation

Correct Answer

D:

`show cdp neighbors` summarizes Cisco Discovery Protocol peers and the local interfaces where their advertisements were received. It helps trace directly connected device topology on a Cisco-compatible segment. More detailed IP/platform information may require `show cdp neighbors detail`; it does not reveal multihop IP-route paths.

Incorrect Answers

A:

Trunk status lists VLAN tagging and trunk membership rather than the discovered device identity. A working trunk alone does not prove which Cisco router is adjacent.

B:

STP determines loop-free Layer 2 topology roles and root bridges, not a Cisco device neighbor inventory. It cannot replace CDP neighbor reporting.

C:

A route table displays IP prefix forwarding entries, not the local CDP device and port identifiers. Connected routes may exist without identifying peer switch ports.

Question 167

A mixed-vendor campus must discover neighboring switches using a standards-based Layer 2 discovery protocol rather than a Cisco-proprietary mechanism. Which should be enabled on both compatible peers?

  1. LLDP transmit and receive on the required interfaces.
  2. Cisco Discovery Protocol only, because it is the open IEEE standard.
  3. ARP broadcasts to collect every neighboring device model.
  4. OSPFv2 hello packets on every access port.

Explanation

Correct Answer

A:

Link Layer Discovery Protocol is a vendor-neutral standards-based neighbor advertisement mechanism at Layer 2. Both participating ports must support and enable the relevant LLDP sending or receiving behavior to discover peers. It shares basic identity, port and capability information, not a replacement for routing or switch security.

Incorrect Answers

B:

CDP is Cisco’s proprietary neighbor advertisement protocol. It is useful among compatible Cisco devices but is not the requested standards-based mixed-vendor choice.

C:

ARP resolves local IPv4 IP-to-MAC relationships. It does not routinely advertise the remote port, device model or LLDP management information required.

D:

OSPF builds Layer 3 routing adjacencies and requires appropriate IP/routing configuration. It is not a generic vendor-neutral Layer 2 neighbor inventory mechanism for access switches.

Question 168

A switch uses LLDP to advertise its local port identity but does not list the neighboring firewall. The peer sends LLDP advertisements and the local interface has `no lldp receive`. What should change?

  1. Enable LLDP receive on the switch interface.
  2. Change the STP bridge priority to zero.
  3. Add an ARP entry with the firewall MAC.
  4. Enable LLDP transmit only on the switch interface.

Explanation

Correct Answer

A:

LLDP receiving allows the switch to process the peer’s advertised chassis, port and capability information. When receive is disabled, incoming LLDP frames are not used to populate the neighbor table despite a transmitting peer. This is independent of normal user data forwarding on the same port.

Incorrect Answers

B:

Spanning Tree root priority affects loop prevention, not whether incoming LLDP information is decoded on an interface.

C:

An ARP entry can help IPv4 neighbor resolution, but it does not process LLDP advertisements or populate the LLDP chassis/port neighbor database.

D:

Transmit controls what the switch sends to the firewall; it does not restore local reception of the firewall’s advertisements. The missing function is receive.

Question 169

A device is configured to receive LLDP information but its own identity never appears in the neighbor table of the directly connected peer. LLDP transmit is disabled on its uplink. What should be enabled?

  1. Enable OSPF route redistribution into the uplink.
  2. Enable LLDP receive only on the local uplink.
  3. LLDP transmission on the local uplink interface.
  4. Set a default IPv4 route on the device.

Explanation

Correct Answer

C:

LLDP transmit causes the device to advertise its identity and port capabilities to adjacent peers. An interface can receive neighbors while not sending its own advertisements, so the remote table remains empty. Enable the appropriate `lldp transmit` behavior and verify with neighbor output on the peer.

Incorrect Answers

A:

OSPF redistribution affects IP route advertisements and does not generate LLDP frames. The symptom is missing LLDP neighbor identity on an adjacent peer.

B:

Receive is already enabled and allows local observation of remote advertisements; it does not cause this device to advertise to the peer. Transmit is missing.

D:

LLDP uses link-local Layer 2 advertisements rather than routed IP packets. A default route cannot substitute for disabled LLDP transmit.

Question 170

Two access switches are intended to share one LACP uplink bundle, but an engineer puts one member in `channel-group 9` and the other local member in `channel-group 10`. What should be corrected?

  1. Configure identical IPv4 addresses on both physical member interfaces.
  2. Require the peer to use exactly the same port-channel number because LACP transmits the local group index.
  3. Make sure the local group numbers remain different so each physical cable has its own EtherChannel.
  4. Place local member interfaces intended for the same bundle into the same local port-channel group and configure compatible peer settings.

Explanation

Correct Answer

D:

An EtherChannel is represented by one logical port-channel interface per local group. Assigning intended members to two separate local group numbers creates two different channel interfaces rather than one bundle. The peer’s group number itself need not numerically match, but member characteristics and negotiation must be compatible across the link.

Incorrect Answers

A:

Layer 2 port-channel members do not normally receive duplicate routed interface addresses. This introduces addressing conflict rather than resolving grouping.

B:

Local channel-group numbers are configuration identifiers and need not match between two switches. The crucial issue is the consistency of each device’s intended member grouping and LACP compatibility.

C:

Different local channel groups are distinct logical bundles, not one multi-link aggregation. This violates the request to combine both physical uplinks.