Free 200-301 Exam Braindumps
Cisco Certified Network Associate (CCNA) Questions 616–620 (page: 125)

Updated On: 10-Feb-2026

An email user has been lured into clicking a link in an email sent by their company's security organization. The webpage that opens reports that it was safe, but the link may have contained malicious code.
Which type of security program is in place?

  1. user awareness
  2. brute force attack
  3. physical access control
  4. social engineering attack

Answer(s): A

Explanation:

This is a training program which simulates an attack, not a real attack (as it says “The webpage that opens reports that it was safe”) so we believed it should be called a “user awareness” program. Therefore the best answer here should be “user awareness”. This is the definition of “User awareness” from CCNA 200-301 Offical Cert Guide Book:
“User awareness: All users should be made aware of the need for data confidentiality to protect corporate information, as well as their own credentials and personal information. They should also be made aware of potential threats, schemes to mislead, and proper procedures to report security incidents. “
Note: Physical access control means infrastructure locations, such as network closets and data centers, should remain securely locked.



DRAG DROP (Drag and Drop is not supported)
Drag and drop the Cisco Wireless LAN Controller security settings from the left onto the correct security mechanism categories on the right.
Select and Place:

  1. See Explanation section for answer.

Answer(s): A

Explanation:




Layer 2 Security Mechanism includes WPA+WPA2, 802.1X, Static WEP, CKIP while Layer 3 Security Mechanisms (for WLAN) includes IPSec, VPN Pass-Through, Web Passthrough “¦


Reference:

https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/106082-wlc-compatibility-matrix.html



Which feature on the Cisco Wireless LAN Controller when enabled restricts management access from specific networks?

  1. TACACS
  2. CPU ACL
  3. Flex ACL
  4. RADIUS

Answer(s): B

Explanation:

Whenever you want to control which devices can talk to the main CPU, a CPU ACL is used.
Note: CPU ACLs only filter traffic towards the CPU, and not any traffic exiting or generated by the CPU.


Reference:

https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/109669-secure-wlc.html



Which set of actions satisfy the requirement for multifactor authentication?

  1. The user enters a user name and password, and then re-enters the credentials on a second screen.
  2. The user swipes a key fob, then clicks through an email link.
  3. The user enters a user name and password, and then clicks a notification in an authentication app on a mobile device.
  4. The user enters a PIN into an RSA token, and then enters the displayed RSA key on a login screen.

Answer(s): C

Explanation:

This is an example of how two-factor authentication (2FA) works:
1. The user logs in to the website or service with their username and password.
2. The password is validated by an authentication server and, if correct, the user becomes eligible for the second factor.
3. The authentication server sends a unique code to the user's second-factor method (such as a smartphone app).
4. The user confirms their identity by providing the additional authentication for their second-factor method.



Which configuration is needed to generate an RSA key for SSH on a router?

  1. Configure VTY access.
  2. Configure the version of SSH.
  3. Assign a DNS domain name.
  4. Create a user with a password.

Answer(s): C



Viewing page 125 of 281
Viewing questions 621 - 625 out of 1395 questions


Post your Comments and Discuss Cisco 200-301 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!