Free 200-301 Practice Test Questions 2026

What is one reason to implement LAG on a Cisco WLC?

A. to increase security and encrypt management frames

B. to provide link redundancy and load balancing

C. to allow for stateful and link-state failover

D. to allow for stateful and link-state failover

Drag and drop the functions of SNMP fault-management from the left onto the definitions on the right.

A network engineer is replacing the switches that belong to a managed-services client with new Cisco Catalyst switches. The new switches will be configured for updated security standards, including replacing Telnet services with encrypted connections and doubling the modulus size from 1024. Which two commands must the engineer configure on the new switches? (Choose two.)

A. crypto key generate rsa general-keys modulus 1024

B. transport input all

C. crypto key generate rsa usage-keys

D. crypto key generate rsa modulus 2048

E. transport Input ssh

Drag and drop the TCP or UDP details from the left onto their corresponding protocols on the right.

R1 as an NTP server must have:
• NTP authentication enabled
• NTP packets sourced from Interface loopback 0
• NTP stratum 2
• NTP packets only permitted to client IP 209.165 200 225
How should R1 be configured?

A. Option A

B. Option B

C. Option C

D. Option D

Refer to the exhibit.

Which two commands must be configured on router R1 to enable the router to accept secure remote-access connections? (Choose two )

A. transport input telnet

B. crypto key generate rsa

C. ip ssh pubkey-chain

D. login console

E. username cisco password 0 Cisco

A Cisco engineer is configuring a factory-default router with these three passwords:
• The user EXEC password for console access is p4ssw0rd1
• The user EXEC password for Telnet access is s3cr3t2
• The password for privileged EXEC mode is pnv4t3p4ss Which command sequence must the engineer configured

A. Option A

B. Option B

C. Option C

D. Option D

Drag and drop each characteristic of device-management technologies from the left onto the deployment type on the right

Drag and drop the threat-mitigation techniques from the left onto the types of threat or attack they mitigate on the right.

What is the difference between IPv6 unicast and anycast addressing?

A. IPv6 anycast nodes must be explicitly configured to recognize the anycast address, but IPv6 unicast nodes require no special configuration

B. IPv6 unicast nodes must be explicitly configured to recognize the unicast address, but IPv6 anycast nodes require no special configuration

C. IPv6 unicast nodes must be explicitly configured to recognize the unicast address, but IPv6 anycast nodes require no special configuration

D. Unlike an IPv6 anycast address, an IPv6 unicast address is assigned to a group of interfaces on multiple nodes

What is a function of a Next-Generation IPS?

A. makes forwarding decisions based on learned MAC addresses

B. serves as a controller within a controller-based network

C. integrates with a RADIUS server to enforce Layer 2 device authentication rules

D. correlates user activity with network events

Refer to the exhibit

R1 learns all routes via OSPF Which command configures a backup static route on R1 to reach the 192 168.20.0/24 network via R3?

A. R1(config)#ip route 192.168.20.0 255.255.0.0 192.168.30.2

B. R1(config)#ip route 192.168.20.0 255.255.255.0 192.168.30.2 90

C. R1(config)#ip route 192.168.20.0 255.255.255.0 192.168.30.2 111

D. R1(config)#ip route 192.168.20.0 255.255.255.0 192.168.30.2