support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. Cisco
  4. 200-301

Free 200-301 Exam Braindumps
Cisco Certified Network Associate (CCNA) Questions 691–695 (page: 140)

Updated On: 10-Feb-2026
Page 140 of 281
PDF with 1395 Questions

What is the default port-security behavior on a trunk link?

  1. It places the port in the err-disabled state if it learns more than one MAC address.
  2. It causes a network loop when a violation occurs.
  3. It disables the native VLAN configuration as soon as port security is enabled.
  4. It places the port in the err-disabled state after 10 MAC addresses are statically configured.

Answer(s): A



Which device separates networks by security domains?

  1. intrusion protection system
  2. firewall
  3. wireless controller
  4. access point

Answer(s): B



How are VLAN hopping attacks mitigated?

  1. manually implement trunk ports and disable DTP
  2. configure extended VLANs
  3. activate all ports and place in the default VLAN
  4. enable dynamic ARP inspection

Answer(s): A



Which enhancements were implemented as part of WPA3?

  1. Forward secrecy and SAE in personal mode for secure initial key exchange
  2. 802.1x authentication and AES-128 encryption
  3. AES-64 in personal mode and AES-128 in enterprise mode
  4. TKIP encryption improving WEP and per-packet keying

Answer(s): A



When a site-to-site VPN is configured which IPsec mode provides encapsulation and encryption of the entire original IP packet?

  1. IPsec transport mode with AH
  2. IPsec tunnel mode with AH
  3. IPsec transport mode with ESP
  4. IPsec tunnel mode with ESP

Answer(s): D



  PDF
Viewing page 140 of 281
Viewing questions 696 - 700 out of 1395 questions


Post your Comments and Discuss Cisco 200-301 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!