Cisco 200-301 Exam Dumps, Practice Test Questions

MAC filtering can limit some network attachment but cannot stop physical removal or tampering with devices in an unsecured storeroom.

Fire resistance protects against one hazard, but an unlocked cabinet and accessible key do not provide physical theft prevention.

Inventory records improve accountability after an event but are not a preventive substitute for lockable, controlled physical storage.

The legacy enable password is weaker than the secret mechanism and may expose or weaken privileged EXEC protection.

VTY login authentication is a distinct stage from entering privileged EXEC mode.

SSH encrypts remote transport but does not directly replace the privileged EXEC enable secret.

Password 0 stores the specified account password as plaintext, rather than using a securely stored local secret.

Enable secret controls privileged EXEC escalation and does not define a named operator local login identity.

Local lookup requires an existing named account; line login method alone does not create it.

The VTY transport command governs inbound terminal protocols, not the password or AAA policy used when requesting privileged EXEC.

NAT outside marks an IP routing interface for translation and cannot control access to device EXEC privilege levels.

A VTY line is a terminal access endpoint, not an IP interface obtaining a DHCP address for the enable command.

That still allows plaintext Telnet sessions and violates the explicit SSH-only requirement.

Local username authentication does not by itself remove Telnet from permitted remote line protocols.

Output transport configures outbound sessions, not the input protocols accepted for remote management.

SSH applies to IP VTY transport and does not provide the required direct console login behavior.

Enable secret protects privileged mode but does not itself enforce authentication before user EXEC access.

VTY authorization affects remote terminal access; the question explicitly asks for authentication on the console line.

A banner does not validate secret storage and would be a credential disclosure if it revealed the secret.

Permitting Telnet without authentication is a management weakness unrelated to protected configuration storage.

Type 0 stores plaintext and does not demonstrate the intended one-way protection of a privileged-mode secret.

This is excessive and would remove legitimate employee access rather than only the departed contractor.

A contractor could still authenticate with their own account for user EXEC access.

That indiscriminately blocks legitimate remote administration and does not remove the contractor identity.

An enabled SSH server does not establish whether VTY input protocols include Telnet.

Current user sessions do not report the complete configured transport input and login policy.

Line usage/status cannot reliably replace inspection of the VTY running-configuration section.

Enabling Telnet would expose plaintext remote CLI connections and does not restrict source subnets as required.

Interface ACL direction does not replace the VTY-specific access-class control specified for limiting remote SSH logins.

Local login checks credentials but does not by itself restrict which remote source IPs may attempt a VTY session.

Password obfuscation is unrelated to terminating an already authenticated inactive terminal.

Login authentication establishes a session but does not configure automatic inactivity termination.

Queue buffering cannot log out idle terminal sessions and may adversely affect packet handling.