Free 200-301 Exam Braindumps
Cisco Certified Network Associate (CCNA) Questions 566–570 (page: 115)

Updated On: 10-Feb-2026

Refer to the exhibit. Which two commands must be added to update the configuration of router R1 so that it accepts only encrypted connections? (Choose two.)

  1. transport input ssh
  2. username CNAC secret R!41!3705926@
  3. crypto key generate rsa 1024
  4. line vty 0 4
  5. ip ssh version 2

Answer(s): A,C



Which command implies the use of SNMPv3?

  1. snmp-server user
  2. snmp-server host
  3. snmp-server enable traps
  4. snmp-server community

Answer(s): A


Reference:

https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/snmp/configuration/15-e/snmp-15-e-book.pdf



R1 as an NTP server must have:

-NTP authentication enabled
-NTP packets sourced from Interface loopback 0
-NTP stratum 2
-NTP packets only permitted to client IP 209.165.200.225

How should R1 be configured?

  1. ntp authenticate ntp authentication-key 2 sha1 CISCO123 ntp source Loopback0 ntp access-group server-only 10 ntp master 2 ! access-list 10 permit udp host 209.165.200.225 any eq 123
  2. ntp authenticate ntp authentication-key 2 md5 CISCO123 ntp interface Loopback0 ntp access-group server-only 10 ntp stratum 2 ! access-list 10 permit 209.165.200.225
  3. ntp authenticate ntp authentication-key 2 md5 CISCO123 ntp source Loopback0 ntp access-group server-only 10 ntp master 2 ! access-list 10 permit 209.165.200.225
  4. ntp authenticate ntp authentication-key 2 md5 CISCO123 ntp source Loopback0 ntp access-group server-only 10 ntp stratum 2 ! access-list 10 permit udp host 209.165.200.225 any eq 123

Answer(s): C



What is a capability of FTP in network management operations?

  1. offers proprietary support at the session layer when transferring data
  2. uses separate control and data connections to move files between server and client
  3. encrypts data before sending between data resources
  4. devices are directly connected and use UDP to pass file information

Answer(s): B


Reference:

https://en.wikipedia.org/wiki/File_Transfer_Protocol#:~:text=The%20File%20Transfer%20Protocol%20(FTP,the%20client%20and%20the%20server



A network engineer is configuring a switch so that it is remotely reachable via SSH. The engineer has already configured the host name on the router. Which additional command must the engineer configure before entering the command to generate the RSA key?

  1. password password
  2. ip ssh authentication-retries 2
  3. ip domain-name domain
  4. crypto key generate rsa modulus 1024

Answer(s): C


Reference:

https://www.letsconfig.com/how-to-configure-ssh-on-cisco-ios-devices/



Viewing page 115 of 281
Viewing questions 571 - 575 out of 1395 questions


Post your Comments and Discuss Cisco 200-301 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!