200-601 Exam - Managing Industrial Networking for Manufacturing with Cisco Technologies

NEW QUESTION 1
Refer to the exhibit.

L3SW1 has a spanning-tree priority of 8192 set on VLANs 1, 300, and 301, and these VLANs are configured on and trunked between all switches. Executing the command show spanning-tree blockedports on L2SW5 results in:
L2SW5# show spanning-tree blockedports Name Blocked Interfaces List
-------------------- ------------------------------------
VLAN0001 Gi1/1 VLAN0300 Gi1/1 VLAN0301 Gi1/1
An additional VLAN, VLAN302, is defined on all switches and trunked between them. VLAN302 access ports are set up on each of the switches and PLC#1, I/O#1, and the PanelView are attached. You expect the new VLAN to be listed as blocked on interface GigabitEthernet1/1 of L2SW5 but it is not. The three new devices are able to communicate with each other.
After executing the same command on all switches you see this output on L2SW4: L2SW4# show spanning-tree blockedports
Name Blocked Interfaces List
-------------------- ------------------------------------ VLAN0001 Gi1/2
VLAN0300 Gi1/2 VLAN0301 Gi1/2
Why is VLAN302 forwarding on L2SW5 interface GigabitEthernet 1/1 and L2SW4 interface GigabitEthernet 1/1 and 1/2?

• A. VLAN302 is not configured in the VLAN database on L2SW5
• B. VLAN302 is not in the allowed list on the L2SW5 interface GigabitEthernet1/1 trunk
• C. L2SW4 is the spanning tree root for VLAN 302
• D. The FO3 fiber-optic cable between L2SW4 and L2SW5 is damaged

Answer: C

NEW QUESTION 2
Which three network mechanisms can be used for securely segmenting an industrial network? (Choose three)

• A. VLANs
• B. OSPF
• C. REP
• D. VRFs
• E. Firewalls
• F. Spanning-tree

Answer: ADE

NEW QUESTION 3
Which configuration enables an Industrial Ethernet switch to participate in PTP clock selection and sets the priority value that would break the tie between switches with matching default criteria to 50?

• A. ptp mode boundary ptp priority1 10ptp priority2 50
• B. ptp mode boundary ptp priority1 50ptp priority2 10
• C. ptp mode e2etransparent ptp priority1 50ptp priority2 10
• D. ptp mode e2etransparent ptp priority1 10ptp priority2 50

Answer: A

NEW QUESTION 4
Refer to the exhibit.

All of the vlans listed in the routing table below are trunked using 802.1q and are active on all switches. PLC1, PLC2, and PLC3 each has IP address 192.168.0.1/24 and are connected to ports configured for vlan 50. L2SW1, L2SW2, and L2SW3 are not using vlan trunking for vlan 50.
L3SW1 has following routing table:
10.0.0.0/8 is variably subnetted, 12 subnets, 2 masks C 10.3.138.0/23 is directly connected, Vlan307
C 10.3.136.0/23 is directly connected, Vlan306 C 10.15.153.0/24 is directly connected, Vlan398 C 10.3.142.0/23 is directly connected, Vlan309 C 10.3.140.0/23 is directly connected, Vlan308 C 10.3.186.0/23 is directly connected, Vlan293 C 10.15.154.0/24 is directly connected, Vlan399 C 10.3.184.0/23 is directly connected, Vlan292 C 10.3.190.0/23 is directly connected, Vlan295 C 10.3.188.0/23 is directly connected, Vlan294
C 10.3.182.0/23 is directly connected, Vlan291 C 10.3.180.0/23 is directly connected, Vlan290
PLC1, PLC2, and PLC3 cannot be reconfigured. What can be done to be able to simultaneously communicate with PLC1, PLC2, and PLC3?

• A. Enable NAT on L3SW1
• B. Enable NAT on L2SW1 – L2SW3
• C. Enable NAT on L2SW4
• D. Add vlan 50 to L2SW4 and assign the administrator's an IP address on 192.168.0.0/24 network

Answer: B

NEW QUESTION 5
Refer to the exhibit.

NAT has been configured on the router 'GW' and the IP addresses of router 'GW' have been configured properly. Users of PC1 and PC2 are able to ping the IP address 198.51.100.1 but are unable to reach any other IP addresses on the Internet. The ISP confirmed that their configuration is correct. Which option would likely correct the problem?

• A. ip access-list extended ACL_OUTBOUND permit ip 10.1.1.0 0.0.0.255 anyinterface Ethernet1ip access-group ACL_OUTBOUND out
• B. interface Ethernet1 ip nat outside
• C. interface Ethernet0 ip nat inside
• D. ip route 0.0.0.0 0.0.0.0 198.51.100.1

Answer: D

NEW QUESTION 6
Which in-depth approach is used when deploying defense in an industrial zone?

• A. Use PLCs and control systems from multiple vendors in such a way that the process will become resilient for failures of one vendor.
• B. Deploy two factor authentications for all operators which need to login remote while working from home.
• C. Collect log files at a central location for easy back-up and encryption to provide privacy.
• D. Create multiple zones in the industrial zone and protect / inspect traffic between the zones with firewalls and intrusion monitors.

Answer: D

NEW QUESTION 7
Refer to the exhibit.

You are required to implement traffic segmentation in the network. See the table for relevant device details:
L2SW4, L2SW5, and L2SW6 are connected to L3SW1 with 802.1Q trunks with VLAN 191 and VLAN 398 allowed on the trunk.
You have the following information from L3SW1:
L3SW1# show run interfaces
interface Vlan1 no ip address shutdown
!
interface Vlan2
ip address 10.2.2.2 255.255.255.248
!
interface Vlan191
ip address 10.10.27.126 255.255.255.192
!
interface Vlan200
ip address 10.20.20.1 255.255.255.248
!
interface Vlan398
ip address 10.15.153.1 255.255.255.0
L3SW1# show ip route
*** Output Omitted ***
10.0.0.0/8 is variably subnetted, 5 subnets, 3 masks C 10.2.2.1/29 is directly connected, Vlan2
C 10.10.27.64/26 is directly connected, Vlan191 C 10.15.153.0/24 is directly connected, Vlan398 C 10.20.20.0/29 is directly connected, Vlan200 S 10.200.200.0/24 [1/0] via 10.20.20.2
S* 0.0.0.0/0 [1/0] via 10.2.2.1
You are required to implement a configuration that will meet the following connectivity requirements:
• The Administrator's Station must have full access to PanelView
• PanelView should have limited access, based on specific TCP ports, to PLC#1 and I/O#1
• The Administrator's Station should have no access to PLC#1 and I/O#1
• PLC#1 and I/O#1 should be able to communicate with each other on any port Which action will allow you to meet the connectivity requirements?

• A. Put interface VLAN 191 and interface VLAN 398 into different Virtual Routing and Forwarding (VRF) instances on L3SW1
• B. Deploy an inbound ACL on interface VLAN 191 to control the traffic from the Administrator's Station and PanelView to PLC#1 and I/O#1
• C. No change is required, the traffic is already limited appropriately by the VLAN segmentation
• D. Implement an ACL on Firewall1 to control the traffic flow between VLAN 191 and VLAN 398

Answer: B

NEW QUESTION 8
Which option best describes the ProfiNET Discovery and Configuration Protocol (DCP)?

• A. Can be used to override both static and dynamically (DHCP/BOOTP) assigned IP addresses
• B. Cannot be used to reset a device to factory defaults
• C. Is only supported in Conformance Class B and C devices
• D. Uses the ProfiNET-IRT communication class

Answer: A

NEW QUESTION 9
Refer to the exhibit. The Robot Cell is in a bottling plant. This cell environment needs to consider high flex, EMI, and possible exposure to moisture. Which physical media components need to be considered to prevent network degradation or interruptions?

• A. Stranded, shielded wire with an industrial jacket and M12 connectors
• B. Solid, unshielded commercial jacket wire, and M12 connectors
• C. Stranded, unshielded wire with an industrial jacket, and commercial grade RJ45 connectors
• D. Solid, shielded wire with commercial grade jacket, and commercial grade RJ45 connectors

Answer: A

NEW QUESTION 10
Which selection is a reason why IGMP snooping should be configured on a switched network?

• A. IGMP snooping populates the snooping table with the results of DHCP requests and can be used by Dynamic ARP Inspection to block IP spoofing attacks at Layer-2.
• B. IGMP snooping verifies the source IP address of every IPv4 packet to ensure that it hasn't been originated from a port different than its return path.
• C. IGMP snooping is used to filter ping requests and results to avoid overflowing the MAC address table of the switch.
• D. IGMP snooping allows a Layer-2 switch to limit the transmission of multicast frames to only the ports that have members of the relevant IGMP group.

Answer: D

NEW QUESTION 11
Given a ring topology, which loop prevention mechanism provides the fastest reconvergence time after a link failure?

• A. Rapid Per-VLAN Spanning Tree Protocol
• B. Resilient Ethernet Protocol
• C. Multiple Spanning Tree Protocol
• D. Spanning Tree Protocol

Answer: B

NEW QUESTION 12
It is determined that an intermittent high packet loss event is occurring within a segment of the network. The assigned task is to determine the cause. Which of these conditions should be suspected?

• A. [MISSING]
• B. [MISSING]
• C. [MISSING]
• D. [MISSING]

Answer: D

NEW QUESTION 13
Refer to the exhibit. Which lines represent an I/O connection running at a 20ms RPI?

• A. 2919, 2923, 2926
• B. 2920, 2926, 2929
• C. 2922, 2929, 2935
• D. 2914, 2915, 2916

Answer: A

NEW QUESTION 14
Refer to the exhibit.

SW1, SW2 and virtual switch are connected in a loop. SW1 and SW2 are standard layer-2 switches. Which loop prevention mechanism is best suited for use within this topology?

• A. Per-VLAN Rapid Spanning Tree Protocol+
• B. End-Host Mode
• C. Multi-chassis EtherChannel
• D. BPDU Guard

Answer: B

NEW QUESTION 15
To ensure ProfiNET Layer 2 Class-of-Service markings from ProfiNET devices are trusted by the switch, which command must be entered on the interface attached to the device?

• A. switch(config-if)#mls qos trust cos
• B. switch(config-if)#qos trust cos
• C. switch(config-if)#profinet cos trust
• D. switch(config-if)#trust qos cos

Answer: A

NEW QUESTION 16
You are making changes to a Stratix 5700 using an Add On Profile (AOP) and a controller which is on-line with RSLogix5000. When do the changes you have made get published to the switch?

• A. While online in RSLogix 5000 software the changes made in the AOP are pushed to the switch after pressing the Set button.
• B. All of the changes are automatically pushed to the switch.
• C. Changes to the AOP can only be made from the switch, not in RSLogix 5000.
• D. RSLogix 5000 will push the changes in the AOP to the Stratix 5700 when you right click on the switch, and choose download to switch

Answer: A

NEW QUESTION 17
Refer to the exhibit.

What issue does this topology present for the represented traffic flow?

• A. Standard Produce/Consume traffic is not suitable for an 802.11 wireless environment.
• B. Only one of the Work Group Bridges can transmit at a time, because 802.11 is half duplex.
• C. The Converged Plant-wide Ethernet best practices for 802.11 wireless don't allow for PAC to PAC traffic.
• D. I/O control traffic should utilize the 2.4 GHz band based on best practices.

Answer: B

NEW QUESTION 18
To correctly integrate a Cisco Industrial Ethernet switch into a ProfiNET management system such as SIMATIC STEP 7 or TIA Portal, which is a mandatory action?

• A. Configure an IP address on the ProfiNET VLAN interface
• B. The General Station Description (GSD) file must be uploaded from the switch to the management system.
• C. Enable Quality of Service (QoS) and ensure the management station interface is trusted
• D. Enable SNMP on the switch

Answer: B

NEW QUESTION 19
Which two ports does EtherNet/IP use to communicate? (Choose two.)

• A. TCP 44818
• B. UDP 44818
• C. TCP 502
• D. UDP 502
• E. TCP 2222
• F. UDP 2222

Answer: AF

NEW QUESTION 20
It is common to use Resilient Ethernet Protocol (REP) on the manufacturing floor as a resiliency protocol, as opposed to the Enterprise where it is not generally deployed. What are two reasons why REP is more suitable for the plant floor? (Choose two)

• A. REP is only supported on Industrial Ethernet switches, it is not supported on Catalyst switches.
• B. REP converges faster than Spanning Tree, allowing for greater network availability.
• C. REP supports Industrial Ethernet protocols better because it moves the packets faster.
• D. Running dual cables from access switches to an aggregation switch can have a much higher cost on the plant floor than in the Enterprise and running a ring protocol like REP provides resiliency at a lower cost.
• E. Industrial protocols can be negatively impacted by the number of nodes the Ethernet frame traverses, REP provides a topology with no more than 3 nodes for any data path.

Answer: BD

NEW QUESTION 21
Which describes the relationship between a workgroup bridge?

• A. Wired clients of a workgroup bridge can communicate, through the workgroup bridge, with wireless clients of an autonomous or a controller-based access point
• B. Wireless clients of a controller-based AP can communicate, through the workgroup bridge, with wireless clients of an autonomous access point
• C. Wireless clients of an autonomous access point can communicate with wired clients of a workgroup bridge, but Wireless clients of a controller-based access point cannot communicate with wired clients of a workgroup bridge
• D. Wireless clients of a controller-based access point can communicate with wired clients of a workgroup bridge, but Wireless clients of an autonomous access point cannot communicate with wired clients of a workgroup bridge

Answer: A

NEW QUESTION 22
What are two benefits of a star network topology? (Choose two.)

• A. Disruption of the entire network is not required when adding new machines.
• B. Any problem which leaves the network inoperable can be traced to the central hub.
• C. This network type requires less cable as compared to linear bus topology.
• D. The performance of one of the numerous nodes cannot reflect on the performance of other nodes.
• E. The performance of the entire network is directly dependent on the performance of the hub.

Answer: AB

NEW QUESTION 23
......