Exam Code: cisco 200 310 (Practice Exam Latest Test Questions VCE PDF)
Exam Name: Designing for Cisco Internetwork Solutions
Certification Provider: Cisco
Free Today! Guaranteed Training- Pass cisco 200 310 Exam.
Q41. Which one of these statements is an example of how trust and identity management solutions should be deployed in the enterprise campus network?
A. Authentication validation should be deployed as close to the data center as possible.
B. Use the principle of top-down privilege, which means that each subject should have the privileges that are necessary to perform their defined tasks, as well as all the tasks for those roles below them.
C. Mixed ACL rules, using combinations of specific sources and destinations, should be applied as close to the source as possible.
D. For ease of management, practice defense in isolation - security mechanisms should be in place one time, in one place.
Answer: C
Explanation: Validating user authentication should be implemented as close to the source as possible, with an emphasis on strong authentication for access from untrusted networks. Access rules should enforce policy deployed throughout the network with the following guidelines:
.Source-specific rules with any type destinations should be applied as close to the source as possible.
.Destination-specific rules with any type sources should be applied as close to the destination as possible.
.Mixed rules integrating both source and destination should be used as close to the source as possible.
An integral part of identity and access control deployments is to allow only the necessary access. Highly distributed rules allow for greater granularity and scalability but, unfortunately, increase the management complexity. On the other hand, centralized rule deployment eases management but lacks flexibility and scalability.
Practicing “defense in depth” by using security mechanisms that back each other up is an important concept to understand. For example, the perimeter Internet routers should use ACLs to filter packets in addition to the firewall inspecting packets at a deeper level.
Cisco Press CCDA 640-864 Official Certification Guide Fourth Edition, Chapter 13
Q42. Which two can be used as a branch office WAN solution? (Choose two.)
A. frame relay
B. MPLS
C. Metro Ethernet
D. GPRS
E. dial-up modem
F. 3G USB modems
Answer: B,C
Explanation: Explanation Frame relay is old 'shared' technology today's sites use some flavor or Metro E or MPLS/VPN
Q43. Which interior routing protocol has the most preferable administrative distance by default?
A. RIP
B. OSPF
C. EIGRP
D. BGP
E. IS-IS
Answer: C
Q44. DRAG DROP
Answer:
Q45. Your supervisor wants you to recommend a management protocol that will allow you to track overall bandwidth utilization, utilization by traffic type, and utilization by source and destination. Which is ideally suited for this function?
A. MRTG
B. NetFlow
C. RRD
D. SNMP
Answer: B
Q46. Which three are valid Layer 2 access designs? (Choose three.)
A. Looped Triangle
B. Looped Square
C. Looped U
D. Loop-Free Triangle
E. Loop-Free Square
F. Loop-Free U
Answer: A,B,F
Q47. Which one of these statements describes why, from a design perspective, a managed VPN approach for enterprise teleworkers is most effective?
A. A managed VPN solution uses a cost-effective, on-demand VPN tunnel back to the enterprise.
B. This solution supports all teleworkers who do not require voice or video.
C. This architecture provides centralized management where the enterprise can apply security policies and push configurations.
D. It provides complete flexibility for remote access through a wireless hotspot or a guest network at a hotel, in addition to a home office.
Answer: C
Q48. What two performance considerations must be taken into account when designing a remote worker access solution? (Choose two.)
A. simultaneous VPN connections
B. port density
C. throughput capacity
D. packet size
E. latency
Answer: A,C
Q49. Which two enterprise campus layers are combined in a medium-sized LAN? (Choose two.)
A. core
B. distribution
C. access
D. backbone
E. aggregation
Answer: A,B
Q50. Which two are characteristics of a Lightweight Access Point? (Choose two.)
A. managed via a central wireless LAN controller
B. code upgrade performed via a TFTP server
C. CAPWAP tunnels D. managed directly via CLI or web interface
E. facilitates the creation of its own WLANs and port mappings
Answer: A,C
To know more about the 200-310, click here.