Cisco Updated 200-301 Exam Questions and Answers by alfie-james

Answer C and D is the technically correct selection. An SDN controller tracks network topology and host information. That centralized intelligence lets applications request network behaviour while devices receive instructions through southbound communication. This aligns with Cisco CCNA 200-301 v1.1 because the exam blueprint requires engineers to recognize operational behaviour from configuration symptoms and topology requirements. Layer 2 forwarding remains a device data-plane function, and DDoS protection is not a generic required SDN-controller function. Treat the distractors carefully: most are real Cisco terms, but they solve a different problem or operate at a different layer. The selected answer is the one that would be used by an engineer on the device or in the design to produce the outcome stated in the question.

The correct answer is C: AES-128. Cisco’s WPA2 documentation describes WPA2 as using AES with CCMP; AES Counter Mode encrypts 128-bit blocks with a 128-bit encryption key. The existing answer of AES-256 confuses PSK material or hexadecimal key-entry length with the actual WPA2 CCMP encryption cipher. WPA2-Personal uses a pre-shared key for authentication/key derivation, but the data-protection mechanism is AES-CCMP, not RC4, TKIP with RC4, or plain RC4. TKIP was associated with WPA and is considered legacy; WEP and RC4-based approaches are not acceptable modern wireless protection. CCNA 200-301 v1.1 Network Access expects the basic security pairing: WPA2 uses AES/CCMP, and WPA3 improves authentication with SAE. Because the option set forces a key-size distinction, Cisco’s WPA2 configuration reference supports AES-128. Reference: Cisco WPA2 configuration example describing AES Counter Mode and a 128-bit encryption key.

The verified answer is C. logging trap 4 sends warning severity messages and all more severe syslog messages to the server. Syslog severity numbers become more severe as the number decreases, so level 4 includes emergencies, alerts, critical, errors, and warnings. Cisco CCNA 200-301 v1.1 places this skill in IP Services, where the exam expects a working understanding of how the feature behaves on real Cisco networks, not just a memorized command. Level 5 would include notices but is not limited to warning and error conditions; levels 2 and 3 omit warnings. In production, this distinction matters because a misapplied command or design choice usually creates an outage, a security gap, or unnecessary troubleshooting noise. The correct choice matches the control-plane, data-plane, wireless, security, or services behaviour described in the scenario and should be preferred over options that merely sound related.

This item is the same STP concept as the previous one: root port selection begins with the lowest total path cost to the root bridge. A switch evaluates each possible path toward the root and selects the port that gives the lowest cumulative STP cost. If multiple ports tie on cost, the switch then applies the STP tie-breakers in order. It compares the lowest neighbor bridge ID, then the lowest neighbor port ID, and finally the lowest local port ID if needed. The exam often repeats this rule because engineers must troubleshoot blocked links by understanding exactly why a port was selected. Cisco CCNA 200-301 v1.1 Network Access includes spanning-tree operation, root bridge behavior, and root port selection. The first criterion is not local port ID or neighbor information. Those are secondary tie-breakers. The correct first criterion is the lowest path cost to the root bridge.