ECOPS CCNA 200-301 TRAINING PART 2

Refer to the exhibit. Which command provides this output?

• show ip route

• show ip interface

• show interface

• show cdp neighbor

Which set of action satisfy the requirement for multi-factor authentication?

• The user swipes a key fob, then clicks through an email link

• The user enters a user name and password, and then clicks a notification in an authentication app on a mobile device

• The user enters a PIN into an RSA token, and then enters the displayed RSA key on a login screen

• The user enters a user name and password and then re-enters the credentials on a second screen

Answer explanation

This is an example of how two-factor authentication (2FA) works:

1.  The user logs in to the website or service with their username and password.

2.  The password is validated by an authentication server and, if correct, the user becomes eligible for the second factor.

3.  The authentication server sends a unique code to the user's second-factor method (such as a smartphone app).

4.  The user confirms their identity by providing the additional authentication for their second-factor method.

 

Which mode allows access points to be managed by Cisco Wireless LAN Controllers?

 

• autonomous

• lightweight

• bridge

• mobility express

Answer explanation

A Lightweight Access Point (LAP) is an AP that is designed to be connected to a wireless LAN (WLAN) controller (WLC). APs are "lightweight," which means that they cannot act independently of a wireless LAN controller (WLC). The WLC manages the AP configurations and firmware. The APs are "zero touch" deployed, and individual configuration of APs is not necessary.

Reference: https://www.cisco.com/c/en/us/support/docs/wireless/aironet-1200-series/70278-lap- faq.html

Router A learns the same route from two different neighbors, one of the neighbor routers is an OSPF neighbor and the other is an EIGRP neighbor. What is the administrative distance of the route that will be installed in the routing table?

• 20

• 90

• 110

• 115

• 120

Answer explanation

The Administrative distance (AD) of EIGRP is 90 while the AD of OSPF is 110 so EIGRP route will be chosen to install into the routing table.

Refer to the exhibit. What is the effect of this configuration?

• The switch port interface trust state becomes untrusted

• The switch port remains administratively down until the interface is connected to another switch

• Dynamic ARP inspection is disabled because the ARP ACL is missing

• The switch port remains down until it is configured to trust or untrust incoming packets

Answer explanation

Dynamic ARP inspection (DAI) is a security feature that validates ARP packets in a network. It intercepts, logs, and discards ARP packets with invalid IP-to-MAC address bindings. This capability protects the network from certain man-in-the-middle attacks. After enabling DAI, all ports become untrusted ports.

Refer to the exhibit. Which prefix does Router 1 use for traffic to Host A?

• 10.10.10.0/28

• 10.10.13.0/25

• 10.10.13.144/28

• 10.10.13.208/29

Answer explanation

Host A address fall within the address range. However, if more than one route to the same subnet exist (router will use the longest stick match, which match more specific route to the subnet). If there are route 10.10.13.192/26 and 10.10.13.208/29, the router will forward the packet to /29 rather than /28.

What are two characteristics of a controller-based network? (Choose two)

• The administrator can make configuration updates from the CLI

• It uses northbound and southbound APIs to communicate between architectural layers

• It moves the control plane to a central point.

• It decentralizes the control plane, which allows each device to make its own forwarding decisions

• It uses Telnet to report system issues.

Which of the following dynamic routing protocols are Distance Vector routing protocols?

• IS-IS

• EIGRP

• OSPF

• BGP

• RIP

Refer to exhibit. Which statement explains the configuration error message that is received?

• It is a broadcast IP address

• The router does not support /28 mask.

• It belongs to a private IP address range.

• IT is a network IP address.

Drag and drop the application protocols from the left onto the transport protocols that is uses on the right.

• 
• 
• 
• 
•