Cisco Updated 200-301 Exam Questions and Answers by marla

HSRP gives hosts a resilient default gateway by using a virtual IP address shared by a group of routers. One router is elected active and forwards traffic sent to the virtual gateway; another router waits as standby and takes over if the active router fails. The hosts do not need to know which physical router is active. They continue to use the same default gateway address. That is the central first-hop redundancy model Cisco expects CCNA candidates to understand. HSRP does not synchronize full router configurations, and it does not make every router use the same physical interface address. It also does not inherently load-balance all gateway traffic; classic HSRP is active/standby per group, although designs can use multiple groups for load sharing. The predictable HSRP behaviors are election of active and standby routers, plus use of a shared virtual IP address as the LAN default gateway. Therefore, B and D are the valid choices.

The working routing table already shows a primary default route over the primary circuit. To establish failover, the backup path must be installed as a floating static route: a static route with the same destination but a higher administrative distance than the primary static route. Option B adds default routes through the secondary-circuit next hops and sets the administrative distance to 2. Because a normal static route has an administrative distance of 1, the router keeps the primary route in the routing table while it is reachable. If the primary next hop or exit path becomes unavailable, the route with AD 2 is then selected and traffic moves to the secondary circuit. The host-specific route options do not provide general default-route failover for all traffic, and a second default route without a higher administrative distance could create unwanted equal-cost forwarding. CCNA 200-301 v1.1 expects this distinction under static routing and IP Connectivity. Reference: Cisco static route and floating static route behavior.

Answer D is the technically correct selection. Badge readers on data-center doors are physical access control. They regulate who can enter protected spaces based on identity, role, and authorization. This aligns with Cisco CCNA 200-301 v1.1 because the exam blueprint requires engineers to recognize operational behaviour from configuration symptoms and topology requirements. RBAC can influence the policy, biometrics can be a factor, and MFA can strengthen authentication, but the control described is physical facility access. Treat the distractors carefully: most are real Cisco terms, but they solve a different problem or operate at a different layer. The selected answer is the one that would be used by an engineer on the device or in the design to produce the outcome stated in the question.

A Wireless LAN Controller manages lightweight access points by exchanging control traffic with them. Older Cisco controller deployments used LWAPP, while modern deployments use CAPWAP, but the intent of the answer is the controller-to-lightweight-AP communication function. The WLC is not an AP itself and does not register with a single AP that controls the network. SSIDs identify WLANs for clients, but simply using SSIDs is not the defining WLC function. Monitoring wired LAN activity is not the best description either. Cisco CCNA 200-301 v1.1 Network Access expects candidates to understand the controller-based wireless model: lightweight APs depend on the controller for centralized management, configuration, and policy. The controller sends and receives control-plane messages with APs so wireless services can be coordinated at scale. Within the available choices, sending LWAPP packets to access points is the function that identifies a WLC.