[2021-New] Cisco 200-125 Dumps With Update Exam Questions (161-168)

200-125 Dumps

200-125 Exam Questions - Online Test

200-125 Premium VCE File

Learn More 100% Pass Guarantee - Dumps Verified - Instant Download
150 Lectures, 20 Hours

Q1. - (Topic 8)

Which option is the default switch port port-security violation mode?

A. shutdown

B. protect

C. shutdown vlan

D. restrict

Answer: A

Explanation:

Shutdown—This mode is the default violation mode; when in this mode, the switch will automatically force the switchport into an error disabled (err-disable) state when a violation occurs. While in this state, the switchport forwards no traffic. The switchport can be brought out of this error disabled state by issuing the errdisable recovery cause CLI command or by disabling and reenabling the switchport.

Shutdown VLAN—This mode mimics the behavior of the shutdown mode but limits the error disabled state the specific violating VLAN.

Q2. - (Topic 5)

Refer to the exhibit.

Which subnet mask will place all hosts on Network B in the same subnet with the least amount of wasted addresses?

A. 255.255.255.0

B. 255.255.254.0

C. 255.255.252.0

D. 255.255.248.0

Answer: B

Explanation:

310 hosts < 512 = 29 -> We need a subnet mask of 9 bits 0 -> 1111 1111.1111 1111.1111

1110.0000 0000 -> 255.255.254.0

Q3. CORRECT TEXT - (Topic 7)

CCNA.com has a small network that is using EIGRP as its IGP. All routers should be running an EIGRP AS number of 12. Router MGT is also running static routing to the ISP.

CCNA.com has recently added the ENG router. Currently, the ENG router does not have connectivity to the ISP router. All over interconnectivity and Internet access for the existing locations of the company are working properly.

The task is to identify the fault(s) and correct the router configuration(s) to provide full connectivity between the routers.

Access to the router CLI can be gained by clicking on the appropriate host.

All passwords on all routers are cisco.

IP addresses are listed in the chart below.

MGT

Fa0/0 – 192.168.77.33

S1/0 – 198.0.18.6

S0/0 – 192.168.27.9

S0/1 – 192.168.50.21

ENG

Fa0/0 – 192.168.77.34

Fa1/0 – 192.168.12.17

Fa0/1 – 192.168.12.1

Parts1

Fa0/0 – 192.168.12.33

Fa0/1 – 192.168.12.49

S0/0 – 192.168.27.10

Parts2

Fa0/0 – 192.168.12.65

Fa0/1 – 192.168.12.81

S0/1 – 192.168.50.22

Answer:

On the MGT Router: Config t

Router eigrp 12

Network 192.168.77.0

Q4. - (Topic 7)

Refer to the exhibit.

HostA cannot ping HostB. Assuming routing is properly configured, what is the cause of this problem?

A. HostA is not on the same subnet as its default gateway.

B. The address of SwitchA is a subnet address.

C. The Fa0/0 interface on RouterA is on a subnet that can't be used.

D. The serial interfaces of the routers are not on the same subnet.

E. The Fa0/0 interface on RouterB is using a broadcast address.

Answer: D

Explanation:

Now let’s find out the range of the networks on serial link: For the network 192.168.1.62/27:

Increment: 32

Network address: 192.168.1.32

Broadcast address: 192.168.1.63 For the network 192.168.1.65/27: Increment: 32

Network address: 192.168.1.64

Broadcast address: 192.168.1.95

-> These two IP addresses don’t belong to the same network and they can’t see each other.

Q5. - (Topic 7)

An administrator is trying to ping and telnet from SwitchC to RouterC with the results shown below.

Click the console connected to RouterC and issue the appropriate commands to answer the questions.

Which will fix the issue and allow ONLY ping to work while keeping telnet disabled?

A. Correctly assign an IP address to interface fa0/1.

B. Change the ip access-group command on fa0/0 from “in” to “out”.

C. Remove access-group 106 in from interface fa0/0 and add access-group 115 in.

D. Remove access-group 102 out from interface s0/0/0 and add access-group 114 in

E. Remove access-group 106 in from interface fa0/0 and add access-group 104 in.

Answer: E

Explanation:

Let’s have a look at the access list 104:

The question does not ask about ftp traffic so we don’t care about the two first lines. The 3rd line denies all telnet traffic and the 4th line allows icmp traffic to be sent (ping). Remember that the access list 104 is applied on the inbound direction so the 5th line “access-list 104 deny icmp any any echo-reply” will not affect our icmp traffic because the “echo-reply” message will be sent over the outbound direction.

Q6. - (Topic 6)

What will be the result if the following configuration commands are implemented on a Cisco switch?

Switch(config-if)# switchport port-security

Switch(config-if)# switchport port-security mac-address sticky

A. A dynamically learned MAC address is saved in the startup-configuration file.

B. A dynamically learned MAC address is saved in the running-configuration file.

C. A dynamically learned MAC address is saved in the VLAN database.

D. Statically configured MAC addresses are saved in the startup-configuration file if frames from that address are received.

E. Statically configured MAC addresses are saved in the running-configuration file if frames from that address are received.

Answer: B

Explanation:

In the interface configuration mode, the command switchport port-security mac-address sticky enables sticky learning. When entering this command, the interface converts all the dynamic secure MAC addresses to sticky secure MAC addresses.

Q7. - (Topic 4)

Refer to the exhibit.

Which statement describes DLCI 17?

A. DLCI 17 describes the ISDN circuit between R2 and R3.

B. DLCI 17 describes a PVC on R2. It cannot be used on R3 or R1.

C. DLCI 17 is the Layer 2 address used by R2 to describe a PVC to R3.

D. DLCI 17 describes the dial-up circuit from R2 and R3 to the service provider.

Answer: C

Explanation:

DLCI-Data Link Connection Identifier Bits: The DLCI serves to identify the virtual connection so that the receiving end knows which information connection a frame belongs to. Note that this DLCI has only local significance. Frame Relay is strictly a Layer 2 protocol suite.

Q8. - (Topic 4)

What are three reasons that an organization with multiple branch offices and roaming users might implement a Cisco VPN solution instead of point-to-point WAN links? (Choose three.)

A. reduced cost

B. better throughput

C. broadband incompatibility

D. increased security

E. scalability

F. reduced latency

Answer: A,D,E

Explanation:

IPsec offer a number of advantages over point to point WAN links, particularly when multiple locations are involved. These include reduced cost, increased security since all traffic is encrypted, and increased scalability as s single WAN link can be used to connect to all locations in a VPN, where as a point to point link would need to be provisioned to each location.