exam questions

Exam 200-301 All Questions

View all questions & answers for the 200-301 exam

Exam 200-301 topic 1 question 1369 discussion

Actual exam question from Cisco's 200-301
Question #: 1369
Topic #: 1
[All 200-301 Questions]

SIMULATION
-


Guidelines
-

This is a lab item in which tasks will be performed on virtual devices

• Refer to the Tasks tab to view the tasks for this lab item.
• Refer to the Topology tab to access the device console(s) and perform the tasks.
• Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.
• All necessary pre-configurations have been applied.
• Do not change the enable password or hostname for any device.
• Save your configurations to NVRAM before moving to the next item.
• Click Next at the bottom of the screen to submit this lab and move to the next question.
• When Next is clicked, the lab closes and cannot be reopened.


Topology
-




Tasks
-

Refer to the topology. All physical cabling is in place. Configure local user account, configure a Named ACL (NACL), and Dynamic Arp Inspection.

1. Configure a local account on Sw3 with telnet access only on virtual ports 0-4. Use the following information:

o Username: tech12
o Password: load1key
o Algorithm type: md5
o Privilege level: Exec mode

2. Configure and apply a NACL on R1 to control network traffic towards ISP:

o Name: ISP_ACL
o Restrict RFC 1918 class A and B addresses
o Allow all other addresses

3. A DHCP IP Pool is preconfigured on R1 for VLAN 5, and DHCP Snooping is configured on Sw2. Configure on Sw2:

o Dynamic Arp Inspection for VLAN 5
o Enable validation of the ARP packet destination MAC address
o Enable validation of the ARP packet source MAC address
o Enable validation of the ARP Packet IP address

Show Suggested Answer Hide Answer
Suggested Answer:

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
dasand
3 months, 1 week ago
Task-1 SW3 conf t username tech12 privilege 15 algorithm-type md5 secret load1key line vty 0 4 login local transport input telnet end wr Task-2 R1 conf t ip access-list extended ISP_ACL deny 10.0.0.0 0 0.255.255.255 any deny 172.16.0.0 0.15.255.255 any permit ip any any exit interface e0/1 ip access-group ISP_ACL out end wr Task-3 SW2 conf t ip arp inspection vlan 5 ip arp inspection validate dst-mac ip arp inspection validate src-mac ip arp inspection validate ip end wr
upvoted 2 times
...
MinSun600
7 months, 3 weeks ago
task 2 the subnet masks are incorrect
upvoted 1 times
...
matass_md
8 months, 3 weeks ago
Task 1 and Task 2 are incorrect : Task 1 username tech12 privilege 15 secret load1key line vty 0-4 transport input telnet Task 2 1918 RFC Class A 10.0.0.0/8 255.0.0.0 Class B 172.16.0.0/12 255.240.0.0 ip access-list standard ISP_ACL deny 10.0.0.0 0.255.255.255 deny 172.16.0.0 0.15.255.255 permit any interface e0/1 ip access-group ISP_ACL out ip arp inspection vlan 5 ip arp validate des-mac ip arp validate src-mac ip arp validate ip
upvoted 3 times
MinSun600
3 weeks, 4 days ago
task 2 we're using the wild card mask not Subnet mask and you have to put login local on task 1
upvoted 1 times
...
MinSun600
7 months, 3 weeks ago
task 1 you missed username tech12 privilege 15 the algorithm-type md5 secret load1key then sw3(config )#line vty 0 4 sw3(config-line)#login local sw3(config-line)# transport input telnet sw3(config-line)# exit sw3(config)# end wr memory
upvoted 3 times
gten111
7 months ago
secret implies it's encrypted by md5
upvoted 4 times
...
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago