QUESTION 121
What is a characteristic of RSA?

A. It uses preshared keys for encryption.
B. It is a symmetric decryption algorithm.
C. It requires both sides to have identical keys for encryption.
D. It is an asymmetric encryption algorithm.

Correct Answer: D

QUESTION 122
Why would VRRP be implemented when configuring a new subnet in a multivendor environment?

A. to interoperate normally with all vendors and provide additional security features for Cisco devices
B. to enable normal operations to continue after a member failure without requiring a change in a host ARP cache
C. to ensure that the spanning-tree forwarding path to the gateway is loop-free
D. when a gateway protocol is required that supports more than two Cisco devices for redundancy

Correct Answer: B

QUESTION 123
Which default condition must be considered when an encrypted mobility tunnel is used between two Cisco WLCs?

A. The tunnel uses the EoIP protocol to transmit data traffic.
B. Control and data traffic encryption are enabled.
C. TCP port 443 and UDP 21 are used.
D. The tunnel uses the IPsec protocol for encapsulation.

Correct Answer: B

QUESTION 124
What is the purpose of the service-set identifier?

A. It identifies the wired network to which a network device is connected.
B. It identifies the wireless network to which an application must connect.
C. It identifies the wired network to which a user device is connected.
D. It identifies a wireless network for a mobile device to connect.

Correct Answer: D

QUESTION 125
Which type of protocol is VRRP?

A. uses a destination IP address 224.0.0.102 for router-to-router communication
B. uses dynamic IP address assignment
C. allows two or more routers to act as a default gateway
D. uses Cisco-proprietary First Hop Redundancy Protocol

Correct Answer: C

QUESTION 126
Which interface on the WLC is used exclusively as a DHCP relay?

A. Virtual
B. Service
C. Distribution
D. AP-manager

Correct Answer: A

QUESTION 127
A network architect planning a new Wi-Fi network must decide between autonomous, cloud-based, and split MAC architectures. Which two facts should the
architect consider? (Choose two.)

A. Each of the three architectures must use WLCs to manage their access points.
B. Lightweight access points are solely used by split MAC architectures.
C. Cloud-based architectures uniquely use the CAPWAP protocol to communicate between access points and clients.
D. Autonomous architectures exclusively use tunneling protocols to manage access points remotely.
E. All three architectures use access points to manage the wireless devices connected to the wired infrastructure..

Correct Answer: BE

QUESTION 128
Why does an administrator choose to implement a remote access IPsec VPN?

A. to use cryptography for authentication between a device and user over a negotiated VPN gateway
B. to allow access to an enterprise network using any internet-enabled location via a web browser using SSL
C. to provide a secure link between an HTTPS server, authentication subsystem, and an end-user
D. to establish an encrypted tunnel between a remote user and a private network over the internet

Correct Answer: D

QUESTION 129
Which technology allows for logical Layer 3 separation on physical network equipment?

A. Virtual Switch System
B. Virtual Route Forwarding
C. Time Division Multiplexer
D. IPsec Transport Mode

Correct Answer: B

QUESTION 130
What differentiates the TCP and UDP protocols?

A. TCP tracks segments being transmitted or received by assigning segment numbers, and UDP adjusts data flow according to network conditions.
B. TCP immediately transmits data without waiting for a handshake, and UDP awaits a response from the receiver before sending additional data.
C. TCP sends data at a constant rate with error checking on upper protocol layers, and UDP provides error-checking and sequencing.
D. TCP establishes a connection with the device on the other end before transferring, and UDP transfers without establishing a connection.

Correct Answer: D

QUESTION 131
What is a reason to implement IPv4 private addressing?

A. Reduce the size of the forwarding table on network routers.
B. Comply with local law.
C. Reduce the risk of a network security breach.
D. Comply with PCI regulations.
Correct Answer: C

QUESTION 132
What is a function of a northbound API in an SDN environment?

A. It provides orchestration and network automation services
B. It relies on global provisioning and configuration.
C. It supports distributed processing for configuration.
D. It upgrades software and restores files.

Correct Answer: A

QUESTION 133
Which capability is unsupported by the service port on a Cisco WLC?

A. CAPWAP
B. RADIUS
C. CDP
D. TACACS+

Correct Answer: A

QUESTION 134
What does a switch search for in the CAM table when forwarding a frame?

A. destination MAC address and destination port
B. source MAC address and source port
C. source MAC address and aging time
D. destination MAC address and flush time

Correct Answer: A

QUESTION 135
What configuration management mechanism uses TCP port 22 by default when communicating with managed nodes?

A. Ansible
B. Python
C. Chef
D. Puppet

Correct Answer: A

QUESTION 136
Which two transport layer protocols carry syslog messages? (Choose two.)

A. UDP
B. TCP
C. ARP
D. IP
E. RTP

Correct Answer: AB

QUESTION 137
What is a characteristic of cloud-based network topology?

A. onsite network services are provided with physical Layer 2 and Layer 3 components
B. physical workstations are configured to share resources
C. wireless connections provide the sole access method to services
D. services are provided by a public, private, or hybrid deployment

Correct Answer: D

QUESTION 138
What is the role of disaggregation in controller-based networking?

A. It divides the control-plane and data-plane functions.
B. It enables a network topology to quickly adjust from a ring network to a star network.
C. It streamlines traffic handling by assigning individual devices to perform either Layer 2 or Layer 3 functions.
D. It summarizes the routes between the core and distribution layers of the network topology.

Correct Answer: A

QUESTION 139
Which type of encryption does WPA1 use for data protection?
A. AES
B. TKIP
C. PEAP
D. EAP

Correct Answer: B

QUESTION 140
Which two tasks support the physical access control element of a security program? (Choose two.)

A. Implement badge access to critical locations.
B. Run a workshop on corporate security policies.
C. Deploy a video surveillance system.
D. Disperse information about how to protect the organization’s confidential data.
E. Develop slideshows about new security regulations.

Correct Answer: AC