Cisco CCNA 200-301 Practice Test

Cisco Practice Tests

Question 1 / 55 - Mode : Exam
Identify the protocols that can negotiate EtherChannel creation and maintenance. (Choose two) A. VTP B. LACP C. CHAP D. PAgP E. PPTP F. PAP https://www.learncisco.net/courses/icnd-2/etherchannel-and-l3-redundancy/understanding-etherchannel.html Which of the following commands globally enables PortFast on all nontrunking ports? A. spanning-tree portfast default B. spanning-tree portfast C. spanning-tree bpduguard enable D. spanning-tree portfast bpduguard default https://www.learncisco.net/courses/icnd-1/medium-size-switched-network-construction/performance-with-spanning-tree.html What is the administrative distance of RIPv2? A. 110 C. 90 D. 100 E. 1 F. 120 G. 5 Host A and Host B sit in two different subnets. The path between the subnets of these two hosts runs through three different Layer 3 forwarding devices (routers and Layer 3 switches). A network engineer uses the APIC-EM Path Trace ACL Analysis tool to analyze the path used for Host A to send packets to Host B. Which part of the function is done specifically by the ACL Analysis or ACL Trace part of the tool? A. Discovery of the topology that exists between the two hosts B. Analysis of the Layer 3 forwarding decisions in the path from Host A to B C. Analysis of the Layer 2 forwarding decisions in the path from Host A to B D. Analysis of the impact of ACLs on the packets that would flow from Host A to B Which command can be used to find the default gateway address on a Windows PC? A. show ipv6 route B. ping C. netsh D. ipconfig Given the output from a working OSPF router, as seen in the exhibit, how many neighboring routers exist? B. 1 C. 2 D. 3 E. More than 3 When comparing controller-based networks and traditional networks what are some perceived benefits from a controller-based perspective? (Choose two) A. New operational models that allow the entire network to be instantiated and not just a single device at a time B. The use of automation through APIs that enable data-driven models C. New operational models that allow for a single device to be instantiated with the entire network in mind D. The use of legacy approaches in the network to increase efficiency and productivity What is the name of the protocol that is used by IEEE 802.1x devices to communicate with the authenticator and authentication server? A. EAP B. EAPoL C. RADIUS D. TACACS+ Which DSCP Assured Forwarding value provides the worst drop and worst queue performance? A. AF41 B. AF43 C. AF11 D. AF13 Command history is enabled by default. What actions can be completed using the command history feature? (Choose three) A. Commands previously stored in the history buffer can be recalled B. Notepad configurations can be saved to the buffer for future configurations C. Running configuration files can be saved to configure a second internetworking device D. The buffer size of the command history can be set E. The command buffer contents can be displayed https://www.learncisco.net/courses/ccna/part-4-cisco-ios/command-line-interface.html Which of the following describes a multicast type of network communication? A. From one address to a single address B. From one address to all other addresses C. From one address to multiple addresses https://www.learncisco.net/courses/icnd-1/building-a-network/ethernet-protocol.html R1, R2, R3, and R4 have their Fast Ethernet 0/0 interfaces attached to the same VLAN. A network engineer has typed a configuration for each router by using a word processor. He will later copy and paste the configuration into the routers. Examine the following exhibit, which lists configuration for the four routers, as typed by the network engineer. Assuming that all four routers can ping each other’s LAN IP addresses after the configuration has been applied, choose the routers that will be able to form a neighbor relationship with the other routers on the LAN. (You can assume that, if not shown in the exhibit, all other related parameters are still set to their defaults.) (Choose two) A. R1 B. R2 C. R3 D. R4 E. None of the routers will exchange routing information. Which of the following parameters are necessary when creating a new WLAN with the controller GUI? (Choose two) A. SSID B. VLAN number C. Interface D. BSSID E. IP subnet Refer to the exhibit. All switch ports are assigned to the correct VLANs, but none of the hosts connected to SwitchA can communicate with hosts in the same VLAN connected to SwitchB. Based on the output shown, what is the most likely problem? A. The access link needs to be configured in multiple VLANs. B. The link between the switches is configured in the wrong VLAN. C. The link between the switches needs to be configured as a trunk. D. VTP is not configured to carry VLAN information between the switches. E. Switch IP addresses must be configured in order for traffic to be forwarded between the switches. A Cisco Catalyst switch connects to what should be individual user PCs. Each port has the same port security configuration, configured as follows: interface range gigabitethernet 0/1 - 24 switchport mode access switchport port-security switchport port-security mac-address sticky Which of the following answers describe the result of the port security configuration created with these commands? (Choose two) A. Prevents unknown devices with unknown MAC addresses from sending data through the switch ports. B. If a user connects a switch to the cable, prevents multiple devices from sending data through the port. C. Will allow any one device to connect to each port, and will save that device’s MAC address into the startup-config D. Will allow any one device to connect to each port, but will not save that device’s MAC address into the startup-config In a reflection attack, the source IP address in the attack packets is spoofed so that it contains which one of the following entities? A. The address of the attacker B. The address of the reflector C. The address of the victim D. The address of the router A switch’s port Gi0/1 has been correctly enabled with port security. The configuration sets the violation mode to restrict. A frame that violates the port security policy enters the interface, followed by a frame that does not. Which of the following answers correctly describe what happens in this scenario? (Choose two) A. The switch puts the interface into an err-disabled state when the first frame arrives. B. The switch generates syslog messages about the violating traffic for the first frame. C. The switch increments the violation counter for Gi0/1 by 1. D. The switch discards both the first and second frame. Refer to the exhibit; in which area would R1’s Gi0/0 interface be placed? A. 5 B. 6 C. 10 D. 11 What can you verify on a Cisco IOS ISR with the ”show ip interface” command? (Choose five) A. The number of packets input and output on the interface B. The IP address and subnet mask of the interface C. The name or number of an ACL that is applied to the interface D. Whether the router is a DHCP relay agent E. The MAC address of the interface F. The method used to assign the IP address to the interface G. The status and protocol status of the interface What are the considerations when operating in the VTP transparent mode? (Choose two) A. Changes are automatically saved to the vlan.dat file B. The configuration revision number will always be zero C. No manual changes are allowed to VLAN information D. Anytime you make a change to VLAN information, you should copy the running configuration to the startup configuration Which of the following behaviors is applied to a low latency queue in a Cisco router or switch? (Choose two) A. Congestion management B. Shaping C. Policing D. Priority scheduling E. Round robin scheduling Identify the characteristics of layer 3 addressing. (Choose two) A. The TCP/IP protocol stack uses IP B. Ethernet uses Media Access Control, or MAC, addresses C. Layer 3 addresses are assigned to network devices and hosts that provide layer 3 functions D. Network devices are used to maintain the routing table E. Unique Media Access Control, or MAC, addresses are assigned to each PC and each router interface https://www.learncisco.net/courses/icnd-1/building-a-network/tcpip-internet-layer.html Which command is used to enable LLDP globally on a Cisco IOS ISR? A. lldp run B. lldp enable C. lldp transmit D. cdp run E. cdp enable Which command and mode will successfully configure a hostname of R1 on a Cisco IOS router? A. Router(config)#name R1 B. Router# hostname R1 C. Router(config)#hostname R1 D. Router#name R1 E. Router>hostname R1 F. Router>name R1 Which code represents a route inside an area in which it belongs? A. IS - ISIS Interarea B. OI - OSPF Inter C. DCE - Destination D. O - OSPF Intra Which of the following controllers (if any) from Cisco uses a mostly centralized control plane model? A. Cisco Open SDN Controller B. Cisco Application Policy Infrastructure Controller (APIC) C. Cisco APIC Enterprise Module (APIC-EM) D. None of these controllers uses a mostly centralized control plane. Which of the following QoS marking fields could remain with a packet while being sent through four different routers, over different LAN and WAN links? (Choose two) A. CoS B. IPP C. DSCP D. MPLS EXP What are some perceived benefits of controller-based networks as compared to traditional networks? (Choose two) A. New operational models that allow for a single device to be instantiated with the entire network in mind B. The use of APIs to mass-configure network devices, allowing for more consistency and fewer errors C. The use of DevOps approaches in the network to increase efficiency and productivity D. The use of legacy approaches in the network to increase efficiency and productivity Which command is used to enable port security on an interface? A. switchport port-security violation mode B. switchport port-security C. switchport access vlan vlan-number D. switchport mode access E. switchport port-security maximum number F. switchport port-security mac-address mac_address The show port-security interface f0/1 command lists a port status of Secure-shutdown. Which of the following answer must be true about this interface at this time? A. The show interface status command lists the interface status as connected. B. The show interface status command lists the interface status as err-disabled. C. The show port-security interface command could list a mode of shutdown or restrict, but not protect. D. The show port-security interface command could list a violation counter value of 10. What commands describe the implemented outcomes when configuring multiarea OSPF? (Choose two) A. The [ip ospf area] command can be used to enable OSPF directly on an interface. B. The [ip ospf cost] command specifies the OSPF cost of directing a packet across the network to the destination. C. The [network area] command defines the network boundary and ospf routing process number. D. The [router ospf] command configures an OSPF routing process. https://www.learncisco.net/courses/icnd-2/implementing-a-multiarea-ospf-solution/multiarea-ospf-configuration.html Regarding lightweight AP modes, which one of the following is true? A. An AP can operate in multiple modes at the same time. B. An AP only has one possible mode of operation. C. The Run mode is the default mode. D. The SE-Connect mode is used for spectrum analysis. Review the following router configuration and identify the correct statements regarding telnet access to the router: Router(config)#access-list 1 deny host 10.1.20.1 Router(config)#access-list 1 deny host 10.1.20.2 Router(config)#access-list 1 permit host 10.1.10.1 Router(config)#access-list 1 permit host 10.1.10.2 Router(config)#access-list 1 permit 10.1.20.0 0.0.0.255 Router(config)#line vty 0 4 Router(config-line)#access-class 1 in (Choose two) A. Telnet access from all hosts in the 10.1.20.0/24 network is denied except 10.1.20.1 and 10.1.20.2 B. Telnet access from hosts 10.1.20.1 and 10.1.20.2 is allowed C. Telnet access from hosts 10.1.10.1 and 10.1.10.2 is allowed D. Telnet access from all hosts in the 10.1.10.0/24 network is allowed E. Telnet access from all hosts in the 10.1.20.0/24 network is allowed except 10.1.20.1 and 10.1.20.2 F. Telnet attempts that are denied will generate a syslog message You are currently using PAT to translate private IPv4 addresses to the public IPv4 address of your router interface. Users complain that on occasion Internet connections fail. You determine that these failures are a result of PAT running out of port numbers for unique translations. What should you do to resolve this issue? A. Obtain another public IPv4 address from your ISP and configure it on another router interface along with the ip nat outside command B. Purchase more port numbers from your ISP and assign them to NAT C. Obtain another public IPv4 address from your ISP configure static NAT D. Obtain another public IPv4 address from your ISP and configure dynamic NAT E. Obtain another public IPv4 address from your ISP and use both IPv4 addresses in a NAT pool that PAT will use for overloading An enterprise plans to start using a public cloud service, and is considering different WAN options. The answers list four options under consideration. Which options provide good security by keeping the data private while also providing good QoS services? (Choose two) A. Using private WAN connections directly to the cloud provider B. Using an Internet connection without VPN C. Using an intercloud exchange D. Using an Internet connection with VPN In Software-Defined Access (SDA), which of the answers are part of the overlay data plane? A. LISP B. GRE C. OSPF D. VXLAN Which Cisco IOS command is used to advertise a default route into an OSPF domain regardless of whether a default static route is configured? A. default-information originate B. default-information originate always C. default-information originate permanent D. default-information originate no-check What is the alternative notation for the IPv6 address B514:82C3:0000:0000:0029:EC7A:0000:EC72? A. B514 : 82C3 : 0029 : EC7A : EC72 B. B514 : 82C3 :: 0029 : EC7A : EC72 C. B514 : 82C3 : 0029 :: EC7A : 0000 : EC72 D. B514 : 82C3 :: 0029 : EC7A : 0 : EC72 https://www.learncisco.net/courses/icnd-1/introducing-ipv6/the-ipv6-address.html Which command is used to set an inactivity timer for the vty lines on your Cisco IOS switch? A. transport input telnet B. service password-encryption C. no login D. enable secret E. privileged F. no exec G. exec-timeout You want to create a VLAN called Marketing. What is the first step you should take? A. Assign a port to the VLAN B. Assign the VLAN parameters C. Specify the VLAN name D. Specify the VLAN ID https://www.learncisco.net/courses/icnd-1/ethernet-lans/starting-a-switch.html Which of the following is describing the Nonegotiate mode of Dynamic Trunking Protocol? A. Creates a trunk with the neighboring switch based on the DTP request B. Enables trunking on the interface C. Trunking cannot take place on the port regardless of DTP requests D. Sends a DTP communication that it wants to create a trunk with the neighboring switch E. DTP frames are prevented from being generated from the port https://www.learncisco.net/courses/icnd-2/vlans-and-spanning-tree/dynamic-trunking-protocol.html Robust wireless encryption is based on which of the following algorithms? A. WEP B. AES C. DES D. IPsec Which of the following is required when configuring port security with sticky learning? A. Setting the maximum number of allowed MAC addresses on the interface with the switchport port-security maximum interface subcommand B. Enabling port security with the switchport port-security interface subcommand C. Defining the specific allowed MAC addresses using the switchport port-security mac-address interface subcommand D. All the other answers list required commands What are the VLAN design considerations? (Choose four) A. Both ends of an 802.1Q trunk link require matching native VLANs B. The native VLAN should be changed from VLAN 1 C. The maximum number of VLANs is 1001 D. DTP manages trunk negotiations between Cisco switches E. VLAN 0 is the factory default Ethernet VLAN F. The Cisco switch IP address should be in the management VLAN https://www.learncisco.net/courses/icnd-1/medium-size-switched-network-construction/vlans-and-trunk.html In the virtualization world, the ___________ manages and allocates the host hardware for each VM. A. Host controller B. Hyperthreader C. Hypervisor D. Host service Which statements are true about telnet and ssh? (Choose two) A. Only data traffic is encrypted with ssh B. All telnet traffic is sent in plain text C. All ssh traffic is encrypted D. The data is hashed by telnet during transmission E. The username and password is hashed by telnet during authentication F. Only authentication traffic is encrypted with ssh What is the purpose of subnetting? A. To translate an IPv4 address into an IPv6 address B. To take multiple networks and combine them into a single larger network C. To take a Class A network and turn it into a Class B or Class C network D. To translate a public IPv4 address into a private IPv4 address E. To take a single network and divide it into multiple smaller networks What options are required criteria for a service to be a cloud service? (Choose two) A. Broad network access B. Resource pooling C. Agile network access D. Proactive service What is the default security violation mode for port security on a Cisco 2960 Catalyst switch? A. Disable B. Shutdown C. Protect D. None E. Restrict F. Err-disable Which command will assign a global IPv6 address with an autoconfigured interface portion to a router interface? A. ipv6 address 2001:db8:1:1::0001/64 eui-64 B. ipv6 address 2001:db8:1:1::0001/64 auto-configure C. ipv6 address 2001:db8:1:1::/64 auto-configure D. ipv6 address 2001:db8:1:1::/64 eui-64 E. ipv6 address 2001:db8:1:1::/64 Which statements describe the characteristics of port security? (Choose two) A. Sticky learning adds dynamically learned addresses to the running configuration B. Ports configured with port security only accept frames from addresses that have been learned or the ones that have been configured C. Addresses must be manually added to the switch D. It restricts port access using IP addresses https://www.learncisco.net/courses/icnd-1/ethernet-lans/switch-security.html When the Cisco IOS image is located during boot, where is it loaded? A. ROM B. RAM C. TFTP D. NVRAM E. FLASH What source will be chosen when a destination network offers multiple sources? A. The dynamic route B. The route with the highest metric C. The source with the lowest administrative distance D. The static route https://www.learncisco.net/courses/icnd-1/lan-connections/functions-of-routing.html Connections can be verified using a variety of troubleshooting commands. Which of the following commands is used to discover the routes that packets take when traveling to their destination? A. netstat B. tracert C. ping D. nslookup https://www.learncisco.net/courses/icnd-1/lan-connections/packet-delivery-process-at-l3.html What is the name of the Cisco feature that allows for the identification of protocols that are traditionally hard to classify because of their operation? A. DSCP B. NBAR C. DTerm D. CBWFQ

Our Recommended Premium CCNA Training Resources

These are the best CCNA training resources online:

Click Here to get the Cisco CCNA Gold Bootcamp, the most comprehensive and highest rated CCNA course online with a 4.8 star rating from over 30,000 public reviews. I recommend this as your primary study source to learn all the topics on the exam.

Want to take your practice tests to the next level? AlphaPrep’s purpose-built Cisco test engine has the largest question bank, adaptive questions, and advanced reporting which tells you exactly when you’re ready to pass the real exam. Click here for your free trial.

The CCNA 200-301 is for the Cisco Certified Network Associate (CCNA) Implementing and Administering Cisco Solutions exam. You can use the practice test to check your knowledge and improve your understanding in preparation for the Cisco CCNA certification exam.

The Cisco CCNA 200-301 practice exam tests include questions to test your knowledge and skills related to Cisco networking fundamentals, which helps you pass the actual exam.

The Cisco CCNA exam objectives include Cisco network fundamentals on routers, switches, IP addresses, etc., network access, IP connectivity such as static and dynamic routing protocol, IP services, network security fundamentals, and automation and programmability.

Cisco CCNA 200-301 Practice Test

Complete this form to get your score report

Our Recommended Premium CCNA Training Resources