Free 200-301 Exam Braindumps
Cisco Certified Network Associate (CCNA) Questions 611–615 (page: 124)

Updated On: 10-Feb-2026

Refer to the exhibit. What is the effect of this configuration?

  1. The switch port remains administratively down until the interface is connected to another switch.
  2. Dynamic ARP Inspection is disabled because the ARP ACL is missing.
  3. The switch port interface trust state becomes untrusted.
  4. The switch port remains down until it is configured to trust or untrust incoming packets.

Answer(s): C

Explanation:

Dynamic ARP inspection (DAI) is a security feature that validates ARP packets in a network. It intercepts, logs, and discards ARP packets with invalid IP-to-MAC address bindings. This capability protects the network from certain man-in-the-middle attacks. After enabling DAI, all ports become untrusted ports.



What is the difference between AAA authentication and authorization?

  1. Authentication identifies and verifies a user who is attempting to access a system, and authorization controls the tasks the user performs.
  2. Authentication controls the system processes a user accesses, and authorization logs the activities the user initiates.
  3. Authentication verifies a username and password, and authorization handles the communication between the authentication agent and the user database.
  4. Authentication identifies a user who is attempting to access a system, and authorization validates the user's password.

Answer(s): A

Explanation:

AAA stands for Authentication, Authorization and Accounting.
-Authentication: Specify who you are (usually via login username & password)
-Authorization: Specify what actions you can do, what resource you can access
-Accounting: Monitor what you do, how long you do it (can be used for billing and auditing)

An example of AAA is shown below:
-Authentication: “I am a normal user. My username/password is user_tom/learnforever”
-Authorization: “user_tom can access LearnCCNA server via HTTP and FTP”
-Accounting: “user_tom accessed LearnCCNA server for 2 hours”. This user only uses “show” commands.
-



When configuring a WLAN with WPA2 PSK in the Cisco Wireless LAN Controller GUI, which two formats are available to select? (Choose two.)

  1. decimal
  2. ASCII
  3. hexadecimal
  4. binary
  5. base64

Answer(s): B,C


Reference:

https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/config-guide/b_wl_16_10_cg/multi-preshared-key.pdf



DRAG DROP (Drag and Drop is not supported)
Drag and drop the AAA functions from the left onto the correct AAA services on the right.
Select and Place:

  1. See Explanation section for answer.

Answer(s): A

Explanation:



An engineer is asked to protect unused ports that are configured in the default VLAN on a switch. Which two steps will fulfill the request? (Choose two.)

  1. Configure the ports as trunk ports.
  2. Enable the Cisco Discovery Protocol.
  3. Configure the port type as access and place in VLAN 99.
  4. Administratively shut down the ports.
  5. Configure the ports in an EtherChannel.

Answer(s): C,D



Viewing page 124 of 281
Viewing questions 616 - 620 out of 1395 questions


Post your Comments and Discuss Cisco 200-301 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!