Exam 200-301 All Questions

View all questions & answers for the 200-301 exam

Exam 200-301 topic 1 question 1059 discussion

Actual exam question from Cisco's 200-301

Question #: 1059
Topic #: 1

SIMULATION
-

Guidelines
-

This is a lab item in which tasks will be performed on virtual devices

• Refer to the Tasks tab to view the tasks for this lab item.
• Refer to the Topology tab to access the device console(s) and perform the tasks.
• Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.
• All necessary preconfigurations have been applied.
• Do not change the enable password or hostname for any device.
• Save your configurations to NVRAM before moving to the next item.
• Click Next at the bottom of the screen to submit this lab and move to the next question.
• When Next is clicked the lab closes and cannot be reopened.

Topology
-

Tasks
-

Three switches must be configured for Layer 2 connectivity. The company requires only the designated VLANs to be configured on their respective switches and permitted across any links between switches for security purposes. Do not modify or delete VTP configurations.

The network needs two user-defined VLANs configured:

VLAN 202: MARKETING
-

VLAN 303: FINANCE
-

1. Configure the VLANs on the designated switches and assign them as access ports to the interfaces connected to the PCs.
2. Configure the e0/2 interfaces on Sw1 and Sw2 as 802.1q trunks with only the required VLANs permitted.
3. Configure the e0/3 interfaces on Sw2 and Sw3 as 802.1q trunks with only the required VLANs permitted.

Show Suggested Answer

Suggested Answer:

by rogi2023 at April 15, 2023, 6:58 p.m.

Comments

Submit Cancel

[Removed]

Highly Voted 1 year, 11 months ago

Here's my answer : SW1 enable configure terminal vlan 303 name FINANCE interface e0/1 switchport mode access switchport access vlan 303 interface e0/2 switchport mode trunk switchport trunk allowed vlan 303 end copy running-config startup-config SW2 enable configure terminal vlan 202 name MARKETING vlan 303 name FINANCE interface e0/1 switchport mode access switchport access vlan 202 interface e0/2 switchport mode trunk switchport trunk allowed vlan 303 interface e0/3 switchport mode trunk switchport trunk allowed vlan 202,303 end copy running-config startup-config SW3 enable configure terminal vlan 202 name MARKETING vlan 303 name FINANCE interface e0/0 switchport mode access switchport access vlan 202 interface e0/1 switchport mode access switchport access vlan 303 interface e0/3 switchport mode trunk switchport trunk allowed vlan 202,203 end copy running-config startup-config

upvoted 19 times

CCNPTT

1 year, 7 months ago

This is the correct answer.

upvoted 2 times

...

AbdullahMohammad251

1 year, 6 months ago

You are correct! Since we have no router, the PCs from different VLANs won't be able to communicate with one another. There's no need to allow vlans 202, 303 on the trunk ports of all the switches. SW1 will only allow vlan 303 (so that PC5 can reach PC6) SW2 will allow vlan 303 on the left side (so that PC5 can reach PC6) and vlans 202 and 303 on the right side (so that PC4 can reach PC3, and PC6 can reach PC5) SW3 will allow vlans 202 and 303 (so that PC4 can reach PC3, and PC6 can reach PC5)

upvoted 3 times

...

itemba36

Highly Voted 2 years, 1 month ago

I think we should config both vlan 202 and 303 on all three switches. On S1, S2, and S3, we should add VLAN 202 and 303 into their vlan databases. That is to say, to config vlan 303 name FINANCE, and vlan 202 name MARKETING on all three switches.

upvoted 7 times

...

matass_md

Most Recent 10 months, 1 week ago

"permitted across any links between switches for security purposes" : what I understand from this statement that on SW1 even if we don't see the need to add the other VLAN 202 . so all SW should have : switchport trunk allowed vlan 202,303

upvoted 2 times

...

bymrdas

1 year ago

SW1 enable configure terminal vlan 303 name FINANCE interface ethernet 0/1 switchport mode access switchport access vlan 303 exit interface ethernet 0/2 switchport trunk encapsulation dot1q switchport mode trunk switchport trunk allowed vlan 303 exit wr SW2 enable configure terminal vlan 202 name MARKETING vlan 303 name FINANCE interface ethernet 0/1 switchport mode access switchport access vlan 202 interface ethernet 0/2 switchport trunk encapsulation dot1q switchport mode trunk switchport trunk allowed vlan 303 interface ethernet 0/3 switchport trunk encapsulation dot1q switchport mode trunk switchport trunk allowed vlan 202,303 exit wr SW3 enable configure terminal vlan 202 name MARKETING vlan 303 name FINANCE interface ethernet 0/0 switchport mode access switchport access vlan 202 interface ethernet 0/1 switchport mode access switchport access vlan 303 interface ethernet 0/3 switchport trunk encapsulation dot1q switchport mode trunk switchport trunk allowed vlan 202,303 exit wr

upvoted 5 times

...

[Removed]

1 year, 7 months ago

1) SW1: vlan 303 > name FINANCE int e0/1 > sw mo acc > sw acc vlan 303 SW2: vlan 303 > name FINANCE, vlan 202 > name MARKETTING int e0/1 > sw mo acc > sw acc vlan 202 SW3: vlan 303 > name FINANCE, vlan 202 > name MARKETTING int e0/0 > sw mo acc > sw acc vlan 202 int e0/1 > sw mo acc > sw acc vlan 303 2) SW1: int e0/2 > sw mo trunk > sw trunk encapsulation dot1q > sw trunk allowed vlan 303 SW2: int e0/2 > sw mo trunk > sw trunk encapsulation dot1q > sw trunk allowed vlan 303 3) SW2: int e0/3 > sw mo trunk > sw trunk encapsulation dot1q > sw trunk allowed vlan 202,303 SW3: int e0/3 > sw mo trunk > sw trunk encapsulation dot1q > sw trunk allowed vlan 202,303 Final: copy running-config startup-config //I tried on packet tracer and noticed we must define all of the vlans on SW2 and ofcourse SW3

upvoted 5 times

...

shaney67

1 year, 8 months ago

states in the question "2. Configure the e0/2 interfaces on Sw1 and Sw2 as 802.1q trunks with only the required VLANs permitted." So the link between sw1 and 2 must be trunks and not just access

upvoted 1 times

...

BauerBros

1 year, 8 months ago

sw 1 conf t vlan 303 name FINANCE interface e0/1 switchport mode access switchport access vlan303 no shut interface e0/2 switchport mode access switchport access vlan303 no shut sw 2 conf t vlan 303 Name FINANCE vlan 202 name MARKETING interface e0/2 switchport mode access switchport access vlan 303 no shut interface e0/3 encap dot1q switchport mode trunk switchport trunk vlan 303, 202 no shut sw 3 conf t vlan 303 name FINANCE vlan202 MARKETING interface e0/3 encap dot1q switchport mode trunk switchport trunk vlan 303, 202 no shut interface e0/0 switchport mode access switchport access vlan 202 no shut interface e0/1 switchport mode access switchport access vlan 203 no shut

upvoted 1 times

...

Dunedrifter

1 year, 11 months ago

**I tested this in cisco Packet tracer SW1: create only vlan 303 create access port in vlan 303 only allow vlan 303 in the trunk towards SW2 SW2: create both 202 and 303 vlans only allow vlan 303 in the trunk towards SW1 allow both vlans in the trunk towards SW3 Create access port in vlan 202 SW3: create both 202 and 303 vlans allow both 202 and 303 vlans in the trunk towards SW2 assign access ports to their respective vlans. Done! You have acheived layer 2 connectivity!!

upvoted 5 times

...

Shabeth

1 year, 11 months ago

I am not sure about my answer, can someone pls check SW1; en conf t vlan 303 name Finance int e0/1 switchport mode access switchport access vlan 303 int e0/2 switchport mode trunk switchport trunk allowed vlan 202,303 SW2: en conf t vlan 202 name marketing int e0/1 switchport mode access switchport access vlan 202 int e0/2 switchport mode trunk switchport trunk allowed vlan 203, 303 SW3: en conf t vlan 303 name FINANCE vlan 202 name MARKETING int e0/0 switchport mode access switchport access vlan 202 int e0/3 switchport mode trunk switchport trunk allowed vlan 202, 203 int e0/1 switchport mode access switchport access vlan 303 int e0/3 switchport mode trunk switchport trunk allowed vlan 202,303

upvoted 2 times

...

no_blink404

1 year, 11 months ago

I am no expert but this is what I got: SW1): vlan 303 name FINANCE vlan 202 name MARKETING int e0/1 switchport mode access switchport access vlan 303 int e0/2 switchport mode trunk switchport encapsulation dot1q switchport trunk allowed vlan 303, 202 SW2): vlan 303 name FINANCE vlan 202 name MARKETING int e0/1 switchport mode access switchport access vlan 202 int e0/2 switchport mode trunk switchport encapsulation dot1q switchport trunk allowed vlan 303, 202 int e0/3 switchport mode trunk switchport encapsulation dot1q switchport access vlan 303, 202 SW3): vlan 303 name FINANCE vlan 202 name MARKETING int e0/0 switchport mode access switchport access vlan 202 int e0/1 switchport mode access switchport access vlan 303 int e0/3 switchport mode trunk switchport encapsulation dot1q switchport trunk allowed vlan 303, 202

upvoted 4 times

Secsoft

1 year, 10 months ago

What does this command mean? (switchport access vlan 303, 202) in interface e0/3 of SW2.

upvoted 1 times

...

KraZd

2 years ago

ANSWER IS INCORRECT

upvoted 2 times

KraZd

2 years ago

Since the request states the three switches must be configured for Layer 2 connectivity we need to ensure that intra VLAN connectivity exists meaning PC5 & PC6 should be able to ping each other as well as PC3 & PC4

upvoted 1 times

KraZd

2 years ago

SW1: Since the requirement is only for L2 connectivity and there are no hosts in VLAN 210 off of SW1 only VLAN 110 will need to traverse the link between Switch 1 & Switch 2

upvoted 1 times

...

KraZd

2 years ago

SW1: The only VLAN that will need to traverse the link between SW1 & SW2 is VLAN 210 because that is the only VLAN with assigned hosts upstream from SW2. So only VLAN 210 is needed on SW1

upvoted 2 times

KraZd

2 years ago

SW2: Since VLANS 110 & 210 will need to traverse the linke between SW2 & SW3 both VLANS will need to be configured on SW2 or else VLAN 210 will be automatically pruned from the trunk resulting in a loss of communication between PC5 & PC6

upvoted 2 times

KraZd

2 years ago

SW3: Switch 3 has hosts in both VLANS so both VLANS will need to be configured on it.

upvoted 1 times

KraZd

2 years ago

SW1: Since the requirement is only for L2 connectivity and there are no hosts in VLAN 210 off of SW1 only VLAN 110 will need to traverse the link between Switch 1 & Switch 2

upvoted 1 times

...

KraZd

2 years ago

For requirement 3. Configure the e0/3 interfaces on Sw2 and Sw3 as 802.1q trunks with only the required VLANs permitted Since Switch 3 has hosts in both VLAN 110 & VLAN 210 and the requirement is for L2 connectivity both VLANS will need to traverse the link between SW2 & SW3.

upvoted 1 times

...

KraZd

2 years ago

SW2: Since Switch 2 has no connected hosts in VLAN 210 the only way to prevent VLAN 210 from being pruned from the trunk is to create the L2 VLAN on Switch 2 before allowing it on the link. DON'T FORGET THE CONFIGURATION FOR VLAN 210!

upvoted 1 times

...

rogi2023

2 years, 1 month ago

I think on all trunk interfaces should be allowed vlans 202, 303

upvoted 5 times

jonathan126

2 years, 1 month ago

Since there is no need for inter-vlan routing (see the question) and no IP configuration is also required, there is no need to allow vlan 202 on the connection between Sw1 and Sw2. I think the command that is missing on the answer would be: Sw2 int e0/3 switchport trunk allowed vlan 202,303

upvoted 3 times

...