It is impossible to pass Cisco ccna 200 125 book exam without any help in the short term. Come to Examcollection soon and find the most advanced, correct and guaranteed Cisco ccna 200 120 vs 200 125 practice questions. You will get a surprising result by our Abreast of the times CCNA Cisco Certified Network Associate CCNA (v3.0) practice guides.

♥♥ 2018 NEW RECOMMEND ♥♥

Free VCE & PDF File for Cisco 200-125 Real Exam (Full Version!)

★ Pass on Your First TRY ★ 100% Money Back Guarantee ★ Realistic Practice Exam Questions

Free Instant Download NEW 200-125 Exam Dumps (PDF & VCE):
Available on:

P.S. Download 200-125 prep are available on Google Drive, GET MORE:

New Cisco 200-125 Exam Dumps Collection (Question 8 - Question 17)

Q1. Which identification number is valid for an extended ACL?

A. 1

B. 64

C. 99

D. 100

E. 299

F. 1099

Answer: D

Q2. How can you disable DTP on a switch port?

A. Configure the switch port as a trunk.

B. Add an interface on the switch to a channel group.

C. Change the operational mode to static access.

D. Change the administrative mode to access.

Answer: A

Q3. If three devices are plugged into one port on a switch and two devices are plugged into a different port, how many collision domains are on the switch?

A. 2

B. 4

C. 5

D. 6

Answer: B

Q4. Why did Branch1 router lose WAN connectivity with R1 router?

A. The IP address is misconfigured on PPP multilink interface on the Branch1 router.

B. The PPP multilink group is misconfigured on the u00a3ranch1 serial interfaces.

C. The PPP multilink group is misconfigured on the R1 serial interfaces.

D. The Branch1 serial interfaces are placed in a shutdown condition.

Answer: A

Explanation: This question clearly stated there is a WAN connectivity issue between R1 and Branch1 so we should check both of them with the u201cshow ip interface briefu201d command. On R1:

On Branch1:

We can see that although the Multilink1 interfaces are in u201cup/upu201d state but they are not in the same subnet. According to the IP address scheme shown on the topology we can deduce the Multilink interface on Branch1 has been misconfigured, it should be instead.

Q5. CORRECT TEXTA corporation wants to add security to its network. The requirements are:

u2711 Host C should be able to use a web browser (HTTP) to access the Finance Web Server.

u2711 Other types of access from host C to the Finance Web Server should be blocked.

u2711 All access from hosts in the Core or local LAN to the Finance Web Server should be blocked.

u2711 All hosts in the Core and on local LAN should be able to access the Public Web Server.

You have been tasked to create and apply anumbered access listto a single outbound interface. This access list can contain no more thanthreestatements that meet these requirements.

Access to the router CLI can be gained by clicking on the appropriate host.

u2711 All passwords have been temporarily set to u201cciscou201d.

u2711 The Core connection uses an IP address of

u2711 The computers in the Hosts LAN have been assigned addresses of u2013

u2711 host A

u2711 host B

u2711 host C

u2711 host D

u2711 The Finance Web Server has been assigned an address of

u2711 The Public Web Server in the Server LAN has been assigned an address of


Please see below explanation part for details answer steps:


We should create an access-list and apply it to the interface that is connected to the Server LAN because it can filter out traffic from both S2 and Core networks. To see which interface this is, use the u201cshow ip int briefu201d command:

From this, we know that the servers are located on the fa0/1 interface, so we will place our numbered access list here in the outbound direction.

Corp1#configure terminal

Our access-list needs to allow host C u2013 192.168125.3 to the Finance Web Server via HTTP (port 80), so our first line is this:

Corp1(config)#access-list 100 permit tcp host host eq 80

Then, our next two instructions are these:

u2711 Other types of access from host C to the Finance Web Server should be blocked.

u2711 All access from hosts in the Core or local LAN to the Finance Web Server should be blocked.

This can be accomplished with one command (which we need to do as our ACL needs to

be no more than 3 lines long), blocking all other access to the finance web server:

Corp1(config)#access-list 100 deny ip any host

Our last instruction is to allow all hosts in the Core and on the local LAN access to the Public Web Server (

Corp1(config)#access-list 100 permit ip host any Finally, apply this access-list to Fa0/1 interface (outbound direction) Corp1(config)#interface fa0/1

Corp1(config-if)#ip access-group 100 out

Notice: We have to apply the access-list to Fa0/1 interface (not Fa0/0 interface) so that the access-list can filter traffic coming from both the LAN and the Core networks.

To verify, just click on host C to open its web browser. In the address box type to check if you are allowed to access Finance Web Server or not. If your configuration is correct then you can access it.

Click on other hosts (A, B and D) and check to make sure you canu2019t access Finance Web Server from these hosts. Then, repeat to make sure they can reach the public server at Finally, save the configuration


Corp1#copy running-config startup-config

Q6. Scenario:

You work for a company that provides managed network services, and of your real estate clients running a small office is experiencing network issues, Troubleshoot the network issues.

Router R1 connects the main office to internet, and routers R2 and R3 are internal routers NAT is enabled on Router R1.

The routing protocol that is enable between routers R1, R2, and R3 is RIPv2.

R1 sends default route into RIPv2 for internal routers to forward internet traffic to R1. Server1 and Server2 are placed in VLAN 100 and 200 respectively, and dare still running

router on stick configuration with router R2.

You have console access on R1, R2, R3, and L2SW1 devices. Use only show commands to troubleshoot the issues.

Server1 and Seiver2 are unable to communicate with the rest of the network. Your initial check with system administrators shows that IP address settings are correctly configured on the server side. What could be an issue?

A. The VLAN encapsulation is misconfigured on the router subinterfaces.

B. The IP address is misconfigured on the primary router interface.

C. The Router is missing subinterface configuration.

D. The Trunk is not configured on the L2SW1 switch.

Answer: A

Q7. Refer to the exhibit.

Router edge-1 is unable to establish OSPF neighbor adjacency with router ISP-1. Which two configuration changes can you make on edge-1 to allow the two routers to establish adjacency? (Choose two.)

A. Set the subnet mask on edge-1 to 255 255.255.252.

B. Reduce the MTU on edge-1 to 1514.

C. Set the OSPF cost on edge-1 to 1522.

D. Reduce the MTU on edge-1 to 1500.

E. Configure the ip ospf mtu-ignore command on the edge-1 Gi0/0 interface.

Answer: D,E

Explanation: A situation can occur where the interface MTU is at a high value, for example 9000, while the real value of the size of packets that can be forwarded over this interface is 1500.

If there is a mismatch on MTU on both sides of the link where OSPF runs, then the OSPF adjacency will not form because the MTU value is carried in the Database Description (DBD) packets and checked on the other side.

Q8. What are three characteristics of satellite Internet connections? (Choose three.)

A. Their upload speed is about 10 percent of their download speed.

B. They are frequently used by rural users without access to other high-speed connections.

C. They are usually at least 10 times faster than analog modem connections.

D. They are usually faster than cable and DSL connections.

E. They require a WiMax tower within 30 miles of the user location.

F. They use radio waves to communicate with cellular phone towers.

Answer: A,B,C

Q9. Which statement about routing protocols is true?

A. Link-state routing protocols choose a path by the number of hops to the destination.

B. OSPF is a link-state routing protocol.

C. Distance-vector routing protocols use the Shortest Path First algorithm.

D. IS-IS is a distance-vector routing protocol.

Answer: B

Explanation: Link State Routing Protocols

Link state protocols are also called shortest-path-first protocols. Link state routing protocols have a complete picture of the network topology. Hence they know more about the whole network than any distance vector protocol.

Three separate tables are created on each link state routing enabled router. One table is used to hold details about directly connected neighbors, one is used to hold the topology of the entire internetwork and the last one is used to hold the actual routing table.

Link state protocols send information about directly connected links to all the routers in the network. Examples of Link state routing protocols includeOSPF - Open Shortest Path FirstandIS-IS - Intermediate System to Intermediate System.

There are also routing protocols that are considered to be hybrid in the sense that they use aspects of both distance vector and link state protocols.EIGRP - Enhanced Interior Gateway Routing Protocolis one of those hybrid routing protocols.

Q10. When an interface is configured with PortFast BPDU guard, how does the interface respond when it receives a BPDU?

A. It continues operating normally.

B. It goes into a down/down state.

C. It becomes the root bridge for the configured VLAN.

D. It goes into an errdisable state.

Answer: D

P.S. Easily pass 200-125 Exam with Certleader Download Dumps & pdf vce, Try Free: (890 New Questions)