
Pass CCNA 200-301 in Just 3 Days – Stress-Free!
Get your CCNA 200-301 certification with 100% pass guarantee. Pay only after passing!
Click here to secure your guaranteed certification now!
Have questions? Contact us directly on WhatsApp for quick support!
Which action must be taken when password protection is implemented?
- A. Use less than eight characters in length when passwords are complex.
- B. Include special characters and make passwords as long as allowed.
- C. Share passwords with senior IT management to ensure proper oversight.
- D. Store passwords as contacts on a mobile device with single-factor authentication.
What is an enhancement implemented in WPA3?
- A. applies 802.1x authentication and AES-128 encryption
- B. employs PKI and RADIUS to identify access points
- C. uses TKIP and per-packet keying
- D. defends against deauthentication and disassociation attacks
What are two differences between WPA2 and WPA3 wireless security? (Choose two.)
- A. WPA2 uses 192-bit key encryption, and WPA3 requires 256-bit key encryption.
- B. WPA3 uses AES for stronger protection than WPA2, which uses SAE.
- C. WPA2 uses 128-bit key encryption, and WPA3 supports 128-bit and 192-bit key encryption.
- D. WPA3 uses SAE for stronger protection than WPA2, which uses AES.
- E. WPA3 uses AES for stronger protection than WPA2, which uses TKIP.
What is a characteristic of RSA?
- A. It uses preshared keys for encryption.
- B. It is an asymmetric encryption algorithm.
- C. It is a symmetric decryption algorithm.
- D. It requires both sides to have identical keys for encryption.

Refer to the exhibit. Local access for R4 must be established and these requirements must be met:
• Only Telnet access is allowed.
• The enable password must be stored securely.
• The enable password must be applied in plain text.
• Full access to R4 must be permitted upon successful login.
Which configuration script meets the requirements?
- A. !
conf t
!
username test1 password testpass1
enable secret level 15 0 Test123
!
line vty 0 15
login local
transport input telnet - B. !
config t
!
username test1 password testpass1
enable password level 15 0 Test123
!
line vty 0 15
login local
transport input all - C. !
config t
!
username test1 password testpass1
enable password level 1 7 Test123
!
line vty 0 15
accounting exec default
transport input all - D. !
config t
!
username test1 password testpass1
enable secret level 1 0 Test123
!
line vty 0 15
login authentication
password Test123
transport input telnet
What are two protocols within the IPsec suite? (Choose two.)
- A. 3DES
- B. AES
- C. ESP
- D. TLS
- E. AH
Which type of security program is violated when a group of employees enters a building using the ID badge of only one person?
- A. intrusion detection
- B. network authorization
- C. physical access control
- D. user awareness

Refer to the exhibit. A network engineer started to configure port security on a new switch. These requirements must be met:
• MAC addresses must be learned dynamically.
• Log messages must be generated without disabling the interface when unwanted traffic is seen.
Which two commands must be configured to complete this task? (Choose two.)
- A. SW(config-if)#switchport port-security violation restrict
- B. SW(config-if)#switchport port-security mac-address 0010.7B84.45E6
- C. SW(config-if)#switchport port-security maximum 2
- D. SW(config-if)#switchport port-security violation shutdown
- E. SW(config-if)#switchport port-security mac-address sticky

Refer to the exhibit. A network administrator is configuring a router for user access via SSH. The service-password encryption command has been issued. The configuration must meet these requirements:
• Create the username as CCUser.
• Create the password as NA!2$cc.
• Encrypt the user password.
What must be configured to meet the requirements?
- A. username CCUser privilege 10 password NA!2$cc
- B. username CCUser privilege 15 password NA!2$cc
enable secret 0 NA!2$cc - C. username CCUser secret NA!2Sce
- D. username CCUser password NA!2$cc
enable password level 5 NA!2$cc
Which global command encrypts all passwords in the running configuration?
- A. service password-encryption
- B. enable password-encryption
- C. enable secret
- D. password-encrypt