Cisco CCNA 200-301 Practice Test

Cisco Practice Tests

Question 1 / 55 - Mode : Exam
Identify the guidelines for duplex configuration. A. The distance and hop count on links between networking devices and critically connected end points should be manually set. B. Half-duplex on both ends performs worse than a duplex mismatch. C. Point-to-point Ethernet links should always run in half-duplex mode. D. Autonegotiation of speed and duplex is recommended on ports connected to noncritical end points. https://www.learncisco.net/courses/icnd-2/troubleshooting-basic-connectivity/physical-connectivity.html Refer to the exhibit. What will Router1 do when it receives the data frame shown? (Choose three) A. Router1 will strip off the source MAC address and replace it with the MAC address 0000.0c36.6965. B. Router1 will strip off the source IP address and replace it with the IP address 192.168.40.1. C. Router1 will strip off the destination MAC address and replace it with the MAC address 0000.0c07.4320. D. Router1 will strip off the destination IP address and replace it with the IP address of 192.168.40.1. E. Router1 will forward the data packet out interface FastEthernet0/1. F. Router1 will forward the data packet out interface FastEthernet0/2. Identify the protocols that can negotiate EtherChannel creation and maintenance. (Choose two) A. VTP B. LACP C. CHAP D. PAgP E. PPTP F. PAP https://www.learncisco.net/courses/icnd-2/etherchannel-and-l3-redundancy/understanding-etherchannel.html Which of the following components physically connects the router to the external world? A. Interface B. ROM C. Flash D. RAM E. CPU F. NVRAM https://www.learncisco.net/courses/icnd-2/network-management/router-internal-components-overview.html Which command is used to disable the active technology package for a license? A. no license save B. license clear C. no license boot module D. license boot module E. no license install In a reflection attack, the source IP address in the attack packets is spoofed so that it contains which one of the following entities? A. The address of the attacker B. The address of the reflector C. The address of the victim D. The address of the router Which QoS feature is typically used inbound to a network to limit the amount of traffic that is allowed to flow in? A. Traffic classification B. Traffic shaping C. Traffic limiting D. Traffic policing With IEEE 802.1x, which role does a LAN switch typically play? A. Authentication server B. Supplicant C. Translator D. Authenticator What is the destination MAC address of a broadcast frame? A. 00:00:0c:07:ac:01 B. ff:ff:ff:ff:ff:ff C. 43:2e:08:00:00:0c D. 00:00:0c:43:2e:08 E. 00:00:0c:ff:ff:ff Which command is used to generate local RSA keys that will be used for SSH connections to a Cisco IOS device? A. crypto generate rsa key B. crypto generate key rsa C. crypto key generate rsa D. crypto rsa generate key What is the purpose of the “service password-encryption“ command? A. It encrypts all passwords on your router. B. It encrypts the line console password only. C. It encrypts the vty password only. D. It is not a valid cisco command Which two benefits are provided by creating VLANs? (Choose two) A. added security B. dedicated bandwidth C. provides segmentation D. allows switches to route traffic between subinterfaces E. contains collisions https://www.learncisco.net/courses/ccna/part-5-virtual-lans-vlans/vlans-review.html You are configuring port security on a Catalyst IOS switch. You need to choose a violation mode that will deny frames that are in violation of the port security settings while still allowing frames that are not in violation. In addition, syslog messages need to be generated and the port security violation counter must increase each time a violation occurs. Which port security violation mode should you choose? A. Err-disable B. Protect C. Shutdown D. Disable E. Restrict You are implementing a VLSM network. You are using the Class B network of 172.16.0.0/16 and need to create 256 networks from this. The fifth network will then be subnetted into /30 networks. What is the subnet ID of the fourth /30 network? A. 172.16.4.12/30 B. 172.16.4.4/30 C. 172.16.4.6/30 D. 172.16.4.8/30 E. 172.16.4.14/30 F. 172.16.4.10/30 Think about a policing function that is currently working, and also think about a shaping function that is also currently working. That is, the current bit rate of traffic exceeds the respective policing and shaping rates. Which statements are true about these features? (Choose two) A. The policer may or may not be discarding packets. B. The policer is definitely discarding packets. C. The shaper may or may not be queuing packets to slow down the sending rate. D. The shaper is definitely queuing packets to slow down the sending rate. Which of the following OSPF packet types sends missing information to the neighbors? A. link-state acknowledgement, or LSAck B. link-state update, or LSU C. link-state request, or LSR D. database description package, or DBD https://www.learncisco.net/courses/icnd-2/an-overview-of-ospf/link-state-databases.html If you want to be alerted when a device configuration differs from the intended configuration, what should you implement? A. Version control B. Centralized configuration C. Configuration drift D. Configuration monitoring You are currently using PAT to translate private IPv4 addresses to the public IPv4 address of your router interface. Users complain that on occasion Internet connections fail. You determine that these failures are a result of PAT running out of port numbers for unique translations. What should you do to resolve this issue? A. Obtain another public IPv4 address from your ISP and configure it on another router interface along with the ip nat outside command B. Purchase more port numbers from your ISP and assign them to NAT C. Obtain another public IPv4 address from your ISP configure static NAT D. Obtain another public IPv4 address from your ISP and configure dynamic NAT E. Obtain another public IPv4 address from your ISP and use both IPv4 addresses in a NAT pool that PAT will use for overloading Suppose you would like to select a method to protect the privacy and integrity of wireless data. Which one of the following methods should you avoid because it has been deprecated? A. TKIP B. CCMP C. GCMP D. EAP Devices using a wireless LAN must operate in which one of the following modes? A. Round-robin access B. Half duplex C. Full duplex D. None of these answers You have a Class B IP address with a subnet mask of /22. How many bits were borrowed from the host portion of the address? A. Six B. Five C. Seven D. Nine E. Eight F. Four What steps are involved in configuring IPv4 extended access lists? (Choose three) A. Create an extended named ACL B. Apply the ACL globally to the router C. Apply the ACL to an interface D. Specify the conditions to permit or deny packets E. Ensure that the ACL ends with a Deny ALL statement You need to associate fastEthernet0/1 and fastEthernet0/2 with VLAN 10. Which commands would you use to do this? (Choose two) A. int range fastethernet 0/1-2 B. int fastethernet 0/1-2 C. access switchport vlan 10 D. switchport access vlan 10 Which problems can manifest in a redundant switched topology? (Choose three) A. Media Access Control, or MAC, database instability B. Virtual LAN, or VLAN, mismatch errors C. Broadcast storms D. Multiple frame transmission E. Trunk ports failing establishment https://www.learncisco.net/courses/icnd-2/vlans-and-spanning-tree/redundant-topologies.html What is needed to have multiple routers functioning as a single virtual router? A. IP routing must be disabled on the primary router B. The default gateway must be configured on the routers C. EtherChannel must be configured between the routers D. The routers must have the same IP address and MAC https://www.learncisco.net/courses/icnd-2/etherchannel-and-l3-redundancy/gateway-redundancy.html The IPv6 address “2001:db8:abc:1234:0290:27ff:fe17:fc0f/64“ is assigned to a device. How was the interface portion assigned? A. Manually, using DHCPv6 B. Dynamically, using a random generator C. Manually by an administrator D. Dynamically, using EUI-64 What options are required criteria for a service to be a cloud service? (Choose two) A. Broad network access B. Resource pooling C. Agile network access D. Proactive service Which application(s) would Jitter and Delay not be a concern for the users experience? A. Online Gaming. B. VoIP. C. Web browsers. D. videoconferencing. What are some perceived benefits of controller-based networks as compared to traditional networks? (Choose two) A. New operational models that allow for a single device to be instantiated with the entire network in mind B. The use of APIs to mass-configure network devices, allowing for more consistency and fewer errors C. The use of DevOps approaches in the network to increase efficiency and productivity D. The use of legacy approaches in the network to increase efficiency and productivity In a split-MAC architecture, real-time functions such as encryption are handled in which of the following network entities? A. An access layer switch B. A distribution layer switch C. A wireless LAN controller D. A lightweight AP You need to back up the Cisco IOS image of your Catalyst switch to a tftp server. Where is the Cisco IOS image stored? A. Flash B. RAM C. HTTP D. FTP E. USB F. NVRAM Refer to the exhibit. All of the routers in the network are configured with the ip subnet-zero command. Which network addresses should be used for Link A and Network A? (Choose two) A. Network A - 172.16.3.48/26 B. Network A - 172.16.3.128/25 C. Network A - 172.16.3.192/26 D. Link A - 172.16.3.0/30 E. Link A - 172.16.3.40/30 F. Link A - 172.16.3.112/30 You want to disable the negotiation of trunking for all FastEthernet ports. Which commands are required to do this? (Choose two) A. interface range FastEthernet 0/1-24 B. show vlan brief C. switchport access vlan 2 D. switchport mode access When comparing next-generation IPS to traditional IPS, what additional capabilities can be leveraged to more efficiently block traffic? (Choose three) A. AVC B. Signature-based filtering C. Contextual awareness D. Event impact level Which layer of the OSI model defines how data is formatted for transmission? A. Session B. Network C. Transport D. Application E. Data-link F. Presentation https://www.learncisco.net/courses/icnd-1/building-a-network/host-to-host-communications.html What type of variable is being shown? Routers = [R1,R2,R3] A. List B. Dictionary C. Simple D. Unsigned integers An engineer connects to Router R1 and issues a show ip ospf neighbor command. The status of neighbor 2.2.2.2 lists FULL/BDR. What does the BDR mean? A. R1 is an Area Border Router. B. R1 is a backup designated router. C. Router 2.2.2.2 is an Area Border Router. D. Router 2.2.2.2 is a backup designated router. Host A and Host B sit in two different subnets. The path between the subnets of these two hosts runs through three different Layer 3 forwarding devices (routers and Layer 3 switches). A network engineer uses the APIC-EM Path Trace ACL Analysis tool to analyze the path used for Host A to send packets to Host B. Which part of the function is done specifically by the ACL Analysis or ACL Trace part of the tool? A. Discovery of the topology that exists between the two hosts B. Analysis of the Layer 3 forwarding decisions in the path from Host A to B C. Analysis of the Layer 2 forwarding decisions in the path from Host A to B D. Analysis of the impact of ACLs on the packets that would flow from Host A to B Using the exhibit as a reference, how many JSON objects are there? A. 11 B. 1 C. 2 D. 12 Refer to the exhibit; in which area would R1’s Gi0/0 interface be placed? A. 5 B. 6 C. 10 D. 11 Which features make IPv6 an improvement over IPv4 addressing? (Choose two) A. Uses Time to Live, or TTL, values in the header B. Security and mobility build into the standard C. Larger address space D. Offers approximately 4.3 billion addresses https://www.learncisco.net/courses/icnd-1/introducing-ipv6/the-ipv6-address.html Each virtual OS instance that exists on a server is referred to as a ___________ A. KVM B. VM C. CSR D. hypervisor What is the default inactivity timer in minutes for the Console port on a Cisco IOS 2900 ISR? A. 20 B. 5 C. 10 D. 15 E. 3 F. 1 G. 7 Identify the command used to show the status of a specific interface. A. show interfaces description B. show interfaces type module/slot/port C. show interfaces hardware D. show interfaces load https://www.learncisco.net/courses/icnd-1/network-environment-management/neighbors-on-the-network.html Which command displays information about security options configured on an interface? A. show port-security interface [interface-id] B. show port-security [interface-id] C. show port-security[address] D. show security [interface-id] Which of the following are characteristics of IP? (Choose three) A. Connection-oriented protocol B. Guaranteed delivery C. Connectionless protocol D. Transport layer protocol E. Best-effort delivery F. Network layer protocol Which statements identify VLAN trunking behavior across IEEE 802.1Q links? (Choose two) A. By default, access ports carrytraffic for one VLAN only B. The layer 2 header must remain static to keep track of VLAN origins C. All VLANs have a tag, except the native VLAN D. The native VLAN should be left alone for security https://www.learncisco.net/courses/icnd-1/medium-size-switched-network-construction/vlans-and-trunk.html Which IOS command always displays OSPF hello timer settings? A. show ip protocols B. show ip route C. show ip ospf interface D. show ip ospf neighbor E. debug ip ospf events Which statement describes how to create VLANs? A. Use the [vian interface] command B. Use the [vlan] global configuration command C. Use the [switchport vlan name] command https://www.learncisco.net/courses/icnd-2/vlans-and-spanning-tree/vlan-operations.html What option(s) are required criteria for a service to be a cloud service? (Choose two) A. Rapid elasticity B. Agile network access C. Measured service D. Proactive service Which of the following are available methods of classifying packets in DiffServ on Cisco routers? (Choose three) A. Matching the IP DSCP field B. Matching the 802.1p CoS field C. Matching fields with an extended IP ACL D. Matching the SNMP Location variable R1, R2, R3, and R4 have their Fast Ethernet 0/0 interfaces attached to the same VLAN. A network engineer has typed a configuration for each router by using a word processor. He will later copy and paste the configuration into the routers. Examine the following exhibit, which lists configuration for the four routers, as typed by the network engineer. Assuming that all four routers can ping each other’s LAN IP addresses after the configuration has been applied, choose the routers that will be able to form a neighbor relationship with the other routers on the LAN. (You can assume that, if not shown in the exhibit, all other related parameters are still set to their defaults.) (Choose two) A. R1 B. R2 C. R3 D. R4 E. None of the routers will exchange routing information. By which methods does spanning tree operate when electing a designated port? (Choose two) A. All ports transition to blocking while the election of the designated port takes place B. If necessary, designated port election ties are broken by upstream root cost path C. Root ports and designated ports transition to the forwarding state D. When a stable spanning-tree state is reached, Bridge Protocol Data Units, or BPDUs, are transmitted by designated ports only https://www.learncisco.net/courses/icnd-2/vlans-and-spanning-tree/spanning-tree-operations.html enable secret [password] is hashed using the _______ algorithm. A. MD5 B. AH C. PSK D. ESP E. WPA2 VLAN 10 has a priority of 4096 and VLAN 20 has a priority of 16384. VLAN 20 has a lower MAC address than VLAN 10. What would be the likely result of running the “spanning-tree vlan 20 root primary“ command for VLAN 20? A. VLAN 10 would have a higher priority B. VLAN 20 would have a higher priority C. VLAN 20 would become the root bridge D. VLAN 10 would become the root bridge

Our Recommended Premium CCNA Training Resources

These are the best CCNA training resources online:

Click Here to get the Cisco CCNA Gold Bootcamp, the most comprehensive and highest rated CCNA course online with a 4.8 star rating from over 30,000 public reviews. I recommend this as your primary study source to learn all the topics on the exam.

Want to take your practice tests to the next level? AlphaPrep’s purpose-built Cisco test engine has the largest question bank, adaptive questions, and advanced reporting which tells you exactly when you’re ready to pass the real exam. Click here for your free trial.

The CCNA 200-301 is for the Cisco Certified Network Associate (CCNA) Implementing and Administering Cisco Solutions exam. You can use the practice test to check your knowledge and improve your understanding in preparation for the Cisco CCNA certification exam.

The Cisco CCNA 200-301 practice exam tests include questions to test your knowledge and skills related to Cisco networking fundamentals, which helps you pass the actual exam.

The Cisco CCNA exam objectives include Cisco network fundamentals on routers, switches, IP addresses, etc., network access, IP connectivity such as static and dynamic routing protocol, IP services, network security fundamentals, and automation and programmability.

Cisco CCNA 200-301 Practice Test

Complete this form to get your score report

Our Recommended Premium CCNA Training Resources