[Free] 2018(May) EnsurePass Testinsides Cisco 200-120 Dumps with VCE and PDF 231-240

Ensurepass.com : Ensure you pass the IT Exams
2018 May Cisco Official New Released 200-120
100% Free Download! 100% Pass Guaranteed!

CCNA Cisco Certified Network Associate CCNA

Question No: 231 – (Topic 5)

What is a valid HSRP virtual MAC address?

A. 0000.5E00.01A3 B. 0007.B400.AE01 C. 0000.0C07.AC15 D. 0007.5E00.B301

Answer: C

Question No: 232 – (Topic 5)

What authentication type is used by SNMPv2?

1. HMAC-MD5

2. HMAC-SHA

3. CBC-DES

4. community strings

Answer: D

Question No: 233 – (Topic 5)

What are the Popular destinations for syslog messages to be saved? (Choose three)

1. Flash

2. The logging buffer .RAM

3. The console terminal

4. Other terminals

5. Syslog server

Answer: B,C,E

Topic 6, Network Device Security

Question No: 234 – (Topic 6)

Refer to the exhibit.

The following commands are executed on interface fa0/1 of 2950Switch.

2950Switch(config-if)# switchport port-security

2950Switch(config-if)# switchport port-security mac-address sticky 2950Switch(config-if)# switchport port-security maximum 1

The Ethernet frame that is shown arrives on interface fa0/1. What two functions will occur when this frame is received by 2950Switch? (Choose two.)

1. The MAC address table will now have an additional entry of fa0/1 FFFF.FFFF.FFFF.

2. Only host A will be allowed to transmit frames on fa0/1.

3. This frame will be discarded when it is received by 2950Switch.

4. All frames arriving on 2950Switch with a destination of 0000.00aa.aaaa will be forwarded out fa0/1.

5. Hosts B and C may forward frames out fa0/1 but frames arriving from other switches will not be forwarded out fa0/1.

6. Only frames from source 0000.00bb.bbbb, the first learned MAC address of 2950Switch, will be forwarded out fa0/1.

Answer: B,D

Question No: 235 – (Topic 6)

Refer to the exhibit.

Statements A, B, C, and D of ACL 10 have been entered in the shown order and applied to interface E0 inbound, to prevent all hosts (except those whose addresses are the first and last IP of subnet 172.21.1.128/28) from accessing the network. But as is, the ACL does not restrict anyone from the network. How can the ACL statements be re-arranged so that the

system works as intended?

1. ACDB

2. BADC

3. DBAC

4. CDBA

Answer: D

Question No: 236 – (Topic 6)

When you are troubleshooting an ACL issue on a router, which command would you use to verify which interfaces are affected by the ACL?

1. show ip access-lists

2. show access-lists

3. show interface

4. show ip interface

5. list ip interface

Answer: D

Question No: 237 – (Topic 6)

Which Cisco Catalyst feature automatically disables the port in an operational PortFast upon receipt of a BPDU?

1. BackboneFast

2. UplinkFast

3. Root Guard

4. BPDU Guard

5. BPDU Filter

Answer: D

Question No: 238 – (Topic 6)

Which set of commands is recommended to prevent the use of a hub in the access layer?

1. switch(config-if)#switchport mode trunk switch(config-if)#switchport port-security maximum 1

2. switch(config-if)#switchport mode trunk

   switch(config-if)#switchport port-security mac-address 1

3. switch(config-if)#switchport mode access switch(config-if)#switchport port-security maximum 1

4. switch(config-if)#switchport mode access switch(config-if)#switchport port-security mac-address 1

Answer: C

Question No: 239 – (Topic 6)

How does using the service password-encryption command on a router provide additional security?

1. by encrypting all passwords passing through the router

2. by encrypting passwords in the plain text configuration file

3. by requiring entry of encrypted passwords for access to the device

4. by configuring an MD5 encrypted key to be used by routing protocols to validate routing exchanges

5. by automatically suggesting encrypted passwords for use in configuring the router

Answer: B

Question No: 240 – (Topic 6)

Refer to the exhibit.

A junior network administrator was given the task of configuring port security on SwitchA to allow only PC_A to access the switched network through port fa0/1. If any other device is detected, the port is to drop frames from this device. The administrator configured the interface and tested it with successful pings from PC_A to RouterA, and then observes the output from these two show commands.

Which two of these changes are necessary for SwitchA to meet the requirements? (Choose two.)

1. Port security needs to be globally enabled.

2. Port security needs to be enabled on the interface.

3. Port security needs to be configured to shut down the interface in the event of a violation.

4. Port security needs to be configured to allow only one learned MAC address.

5. Port security interface counters need to be cleared before using the show command.

6. The port security configuration needs to be saved to NVRAM before it can become active.

Answer: B,D

100% Ensurepass Free Download!
–Download Free Demo:200-120 Demo PDF
100% Ensurepass Free Guaranteed!
–200-120 Dumps