200-301 Flashcards — Free CCNA 200-301 Study Cards

Syslog and NTP

The right combination is Syslog plus NTP. In plain language, Syslog gives the team a central place to collect and review device messages, while NTP makes sure the timestamps on those messages are consistent across the network. Centralized logs are useful on their own, but without synchronized clocks, incident timelines can become confusing and misleading. This pairing is a common operational best practice. Syslog handles the collection side, and NTP handles the time-correlation side. Other services such as DHCP, STP, or NAT do not solve this combination of requirements. The best answer is the one that recognizes that centralized logging and time synchronization are complementary, not competing, services.

Untagged traffic may be placed into different VLANs on each switch.

A native VLAN mismatch can cause untagged traffic sent on one side to be placed into a different VLAN on the other side. That leads to confusing connectivity issues and can also create security concerns. It does not automatically disable the trunk.

The static route to 10.10.10.128/25 via 198.51.100.2

Routers forward using longest prefix match first. Even though the OSPF /24 exists, the static /25 is more specific and covers 10.10.10.200, so the packet is sent via 198.51.100.2. The default route is used only when nothing more specific matches.

Authentication is required or the token is invalid

HTTP 401 means the request is not authorized because valid authentication credentials were not supplied or were rejected. In practice, this usually means the token is missing, expired, malformed, or otherwise invalid.

10.24.7.159

A /27 uses blocks of 32 addresses. The block containing .158 is 10.24.7.128 through 10.24.7.159, so .159 is the broadcast address.

Fiber optic cable

Fiber is commonly used for building uplinks because it supports higher bandwidth and longer distances than typical copper for this use case.

Listening

In the classic 802.1D sequence, the listening state processes BPDUs and prepares for forwarding decisions, but it does not populate the MAC address table yet.

To create a separate Layer 2 broadcast domain

A VLAN separates switch ports into distinct Layer 2 broadcast domains, improving segmentation and reducing unnecessary broadcast scope.

The OSPF route, because 110 is lower than 150

The route with the lower administrative distance is installed. A static route configured with a higher AD becomes a floating static route and remains as a backup until the preferred route disappears.

The neighbor relationship is complete and the neighbor is the DR on that segment

FULL means the OSPF adjacency is fully formed. The /DR suffix indicates that the listed neighbor is the Designated Router for that multiaccess segment.

The EIGRP route, because its administrative distance is lower

When the same prefix is learned from different routing protocols, the router compares administrative distance first. EIGRP internal routes use AD 90, while OSPF uses AD 110, so the EIGRP route is preferred.

SNMPv3 adds authentication and encryption features

SNMPv3 improves security by adding authentication, message integrity, and privacy features. Earlier versions, especially SNMPv1 and v2c, rely on community strings and provide much weaker protection.

The ACL blocks HTTP but allows ICMP

ACLs are processed top down. Line 10 denies TCP destination port 80, which blocks HTTP. Line 20 then permits all remaining IP traffic, including ICMP echo packets used by ping.

Dynamic ARP Inspection

Dynamic ARP Inspection validates ARP packets against trusted binding information, commonly learned through DHCP snooping. That makes it a natural companion control against ARP spoofing attacks.

The request was successful

HTTP 200 indicates a successful request. For a GET operation, it generally means the server successfully returned the requested resource representation.