Free 200-301 Exam Braindumps
Cisco Certified Network Associate (CCNA) Questions 701–705 (page: 142)

Updated On: 10-Feb-2026

DRAG DROP (Drag and Drop is not supported)
Drag and drop the Cisco IOS attack mitigation features from the left onto the types of network attack they mitigate on the right.
Select and Place:

  1. See Explanation section for answer.

Answer(s): A

Explanation:



Refer to the exhibit. SW1 supports connectivity for a lobby conference room and must be secured. The engineer must limit the connectivity from PC1 to the SW1 and SW2 network.
The MAC addresses allowed must be limited to two. Which configuration secures the conference room connectivity?

  1. interface gi1/0/15 switchport port-security switchport port-security maximum 2
  2. interface gi1/0/15 switchport port-security switchport port-security mac-address 0000.abcd.0004vlan 100
  3. interface gi1/0/15 switchport port-security mac-address 0000.abcd.0004 vlan 100
  4. interface gi1/0/15 switchport port-security mac-address 0000.abcd.0004 vlan 100 interface switchport secure-mac limit 2

Answer(s): A



Refer to the exhibit. An engineer is updating the management access configuration of switch SW1 to allow secured, encrypted remote configuration. Which two commands or command sequences must the engineer apply to the switch? (Choose two.)

  1. SW1(config)#enable secret ccnaTest123
  2. SW1(config)#username NEW secret R3mote123
  3. SW1(config)#line vty 0 15 SW1(config-line)#transport input ssh
  4. SW1(config)# crypto key generate rsa
  5. SW1(config)# interface f0/1 SW1(confif-if)# switchport mode trunk

Answer(s): A,C



Which port security violation mode allows from valid MAC addresses to pass but blocks traffic from invalid MAC addresses?

  1. restrict
  2. shutdown
  3. protect
  4. shutdown VLAN

Answer(s): C



A customer wants to provide wireless access to contractors using a guest portal on Cisco ISE. The portal is also used by employees. A solution is implemented, but contractors receive a certificate error when they attempt to access the portal. Employees can access the portal without any errors. Which change must be implemented to allow the contractors and employees to access the portal?

  1. Install an Internal CA signed certificate on the Cisco ISE.
  2. Install a trusted third-party certificate on the Cisco ISE.
  3. Install an internal CA signed certificate on the contractor devices.
  4. Install a trusted third-party certificate on the contractor devices.

Answer(s): B


Reference:

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine-software/200295-Install-a-3rd-party-CA-certificate-in-IS.html



Viewing page 142 of 281
Viewing questions 706 - 710 out of 1395 questions


Post your Comments and Discuss Cisco 200-301 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!