200-301 Cisco Exam Lab Questions

The router load-balances traffic over all routes to the destination.. IP services questions require matching the service to its exact operational role, such as logging, address assignment, file transfer, monitoring, redundancy, or traffic treatment. Cisco CCNA 200-301 v1.1 includes this under IP Connectivity, where the expected skill is to identify the feature that actually creates the observed behavior or meets the configuration goal. The wording usually contains the decisive clue: a prefix length, a VLAN role, a protocol version, a wireless security standard, or a management-plane function. The distractors are real technologies, but they solve different infrastructure problems. In an operational network, choosing the wrong option would typically cause failed connectivity, insecure management, poor wireless behavior, or incorrect forwarding. The selected answer matches the Cisco configuration model and is retained as the verified answer.

Answer A,E is correct: A. ip route 10.10.10.0 255.255.255.0 192.168.2.3; E. ip route 10.10.10.0 255.255.255.248 192.168.2.2. Routing questions are solved by applying longest-prefix match, administrative distance, metric, and protocol-specific behavior in the correct order. Cisco CCNA 200-301 v1.1 includes this under IP Connectivity, where the expected skill is to identify the feature that actually creates the observed behavior or meets the configuration goal. The wording usually contains the decisive clue: a prefix length, a VLAN role, a protocol version, a wireless security standard, or a management-plane function. Wrong answers either use the wrong prefix, the wrong next hop, or a route source that would not be preferred. In an operational network, choosing the wrong option would typically cause failed connectivity, insecure management, poor wireless behavior, or incorrect forwarding. The selected answer matches the Cisco configuration model and is retained as the verified answer.

Answer B,D is correct: B. unique user knowledge; D. soft tokens. Security questions require separating identity, authorization, accounting, encryption, management access, and physical protection. Cisco CCNA 200-301 v1.1 includes this under Security Fundamentals, where the expected skill is identifying the mechanism that actually satisfies the scenario. The wording usually gives the decisive clue: a protocol number, a route prefix, a control-plane role, a wireless security method, or a management command. The distractors protect a different surface or represent weaker/deprecated methods. In a real network, selecting the wrong option would usually produce a failed adjacency, broken client connectivity, insecure management access, or an incorrect forwarding path. The selected answer matches the Cisco behavior and configuration model required by the question, so it is retained as the verified answer for this item.

Answer A,C is correct: A. AH; C. ESP. AH and ESP are the two protocol headers that belong directly to the IPsec suite. Authentication Header provides integrity and authentication for IP packets, while Encapsulating Security Payload provides confidentiality and can also provide integrity and authentication depending on configuration. AES and 3DES are encryption algorithms used by security protocols, not IPsec protocols themselves. TLS is a separate transport/application security protocol used for services such as HTTPS, not an IPsec suite protocol. Cisco CCNA 200-301 v1.1 Security Fundamentals expects candidates to separate security protocols from cryptographic algorithms. The original AES/TLS answer was wrong because it selected one cipher and one non-IPsec protocol. The corrected answer is AH and ESP because those are the IPsec protocol components used to protect traffic at the IP layer.