200-301 Free Practice Test

- (Exam Topic 1)
Which WAN access technology is preferred for a small office / home office architecture?

1. A. broadband cable access
2. B. frame-relay packet switching
3. C. dedicated point-to-point leased line
4. D. Integrated Services Digital Network switching.

Correct Answer: A

- (Exam Topic 1)
How do TCP and UDP differ in the way that they establish a connection between two endpoints?

1. A. TCP uses synchronization packets, and UDP uses acknowledgment packets.
2. B. UDP uses SYN, SYN ACK and FIN bits in the frame header while TCP uses SYN, SYN ACK and ACK bits
3. C. UDP provides reliable message transfer and TCP is a connectionless protocol
4. D. TCP uses the three-way handshake and UDP does not guarantee message delivery

Correct Answer: D

- (Exam Topic 4)
Refer to the exhibit.

Routers R1 and R2 are configured with RIP as the dynamic routing protocol. A network engineer must configure R1 with a floating static route to serve as a backup route to network 192.168.23. Which command must the engineer configure on R1?

1. A. ip route 192.168.23.0 255.255.255.0 192.168.13.3 100
2. B. ip route 192.168.23.0 255.255.255.0 192.168.13.3 121
3. C. ip route 192.168.23.0 255.255.255.255 192.168.13.3 121
4. D. ip route 192.168.23.0 255.255.255.0 192.168.13.3

Correct Answer: B

- (Exam Topic 4)
Which remote access protocol provides unsecured remote CLI access?

1. A. console
2. B. Telnet
3. C. Bash
4. D. SSH

Correct Answer: B

- (Exam Topic 1)
When a site-to-site VPN is configured, which IPsec mode provides encapsulation and encryption of the entire original P packet?

1. A. IPsec tunnel mode with AH
2. B. IPsec transport mode with AH
3. C. IPsec tunnel mode with ESP
4. D. IPsec transport mode with ESP

Correct Answer: C
“Encapsulating Security Payload…Unlike Authentication Header (AH), ESP in transport mode does not provide integrity and authentication for the entire IP packet. However, in Tunnel Mode, where the entire original IP packet is encapsulated with a new packet header added, ESP protection is afforded to the whole inner IP packet (including the inner header) while the outer header (including any outer IPv4 options or IPv6 extension headers) remains unprotected.