Free 200-301 Exam Braindumps
Cisco Certified Network Associate (CCNA) Questions 626–630 (page: 127)

Updated On: 10-Feb-2026

The service password-encryption command is entered on a router. What is the effect of this configuration?

  1. restricts unauthorized users from viewing clear-text passwords in the running configuration
  2. prevents network administrators from configuring clear-text passwords
  3. protects the VLAN database from unauthorized PC connections on the switch
  4. encrypts the password exchange when a VPN tunnel is established

Answer(s): A



Which WPA3 enhancement protects against hackers viewing traffic on the Wi-Fi network?

  1. SAE encryption
  2. TKIP encryption
  3. scrambled encryption key
  4. AES encryption

Answer(s): A



Refer to the exhibit. If the network environment is operating normally, which type of device must be connected to interface fastethernet 0/1?

  1. DHCP client
  2. access point
  3. router
  4. PC

Answer(s): C



Refer to the exhibit. An administrator configures four switches for local authentication using passwords that are stored as a cryptographic hash. The four switches must also support SSH access for administrators to manage the network infrastructure. Which switch is configured correctly to meet these requirements?

  1. SW1
  2. SW2
  3. SW3
  4. SW4

Answer(s): C



Refer to the exhibit. What is the effect of this configuration?

  1. The switch discards all ingress ARP traffic with invalid MAC-to-IP address bindings.
  2. All ARP packets are dropped by the switch.
  3. Egress traffic is passed only if the destination is a DHCP server.
  4. All ingress and egress traffic is dropped because the interface is untrusted.

Answer(s): A

Explanation:

Dynamic ARP inspection is an ingress security feature; it does not perform any egress checking.



Viewing page 127 of 281
Viewing questions 631 - 635 out of 1395 questions


Post your Comments and Discuss Cisco 200-301 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!