Cisco CCNA 200-301 Practice Test

Cisco Practice Tests

Question 1 / 55 - Mode : Exam
Network device addresses use binary system to define their location on the network. How do the decimal and binary number systems work? (Choose three) A. Mathematics is based on the binary system B. Computers are based on the decimal system C. When performing powers of 2 calculations, the least significant bit is equal to 2^1 D. In the decimal system, the digits are 0,1, 2, 3, 4, 5, 6, 7, 8, and 9 E. Powers of 2 provide the basis for binary values F. The binary system uses only the digits 0 and 1 Four OSPF routers connect to the same LAN. In a new election after all routers have been rebooted, which router wins the DR election? A. R4, router-id 4.4.4.4, priority 1 B. R3, router-id 3.3.3.3, priority 2 C. R1, router-id 1.1.1.1, priority 4 D. R2, router-id 2.2.2.2, priority 3 Which public cloud WAN connection options do not offer the ability to have reliable QoS? (Choose two) A. Internet B. Internet VPN C. MPLS VPN D. Ethernet VPN E. Intercloud Which of the following use cases are matching the UTP Ethernet media type? A. Offers the highest bandwidths compared to the other forms of communication B. A four-pair wire with low cost and low signal degradation C. Acts as a wave guide to transmit light between the two ends https://www.learncisco.net/courses/icnd-1/building-a-network/connecting-to-a-lan.html Which cloud service model gives a customer complete control over the virtual hardware components, including processor performance, network connectivity, how much memory and storage space is required, and potentially the operating system that is preinstalled? A. SaaS B. IaaS C. PaaS D. TaaS A Cisco Catalyst switch connects to what should be individual user PCs. Each port has the same port security configuration, configured as follows: interface range gigabitethernet 0/1 - 24 switchport mode access switchport port-security switchport port-security mac-address sticky Which of the following answers describe the result of the port security configuration created with these commands? (Choose two) A. Prevents unknown devices with unknown MAC addresses from sending data through the switch ports. B. If a user connects a switch to the cable, prevents multiple devices from sending data through the port. C. Will allow any one device to connect to each port, and will save that device’s MAC address into the startup-config D. Will allow any one device to connect to each port, but will not save that device’s MAC address into the startup-config Using the exhibit as a reference, what is a valid key? A. ”lastUpdateTime”: 1572317520439 B. ”CSR1000V” C. ”role” D. ”platformId”: Which of the following identifications can be used with Extended ACL? (Choose two) A. Can use 88 as identification B. Can use 2467 with as identification C. Can use filter2 as identification D. Can use 1399 as identification E. Can use filter4 as identification F. Can use 113 as identification https://www.learncisco.net/courses/icnd-1/acls-and-nat/type-of-acls.html What are three advantages of VLANs? (Choose three) A. VLANs establish broadcast domains in switched networks. B. VLANs utilize packet filtering to enhance network security. C. VLANs provide a method of conserving IP addresses in large networks. D. VLANs provide a low-latency internetworking alternative to routed networks. E. VLANs allow access to network services based on department, not physical location. F. VLANs can greatly simplify adding, moving, or changing hosts on the network. https://www.learncisco.net/courses/ccna/part-5-virtual-lans-vlans/vlans-review.html What versions of Wi-Fi Protected Access (WPA) were defined after the IEEE ratified the IEEE 802.11i security standard? (Choose two) A. WPA B. WPA2 C. WPA3 D. WPA0 Refer to the diagram. What method of authentication is being used? A. Open authentication B. CCMP C. WEP D. 802.1x Which of the following options are true about IPv6 addresses? (Choose three) A. Contain 8 fields of 4 hexadecimal values each B. Are 32 bits in length C. Are displayed in decimal characters D. Are 128 bits in length E. Are displayed in hexadecimal characters Which command is used to enable port security on an interface? A. switchport port-security violation mode B. switchport port-security C. switchport access vlan vlan-number D. switchport mode access E. switchport port-security maximum number F. switchport port-security mac-address mac_address What is the function of PVST+? A. Multiple 802.1w per VLAN B. One 802.1D per VLAN C. One 802.1w per VLAN D. Multiple 802.1D per VLAN https://www.learncisco.net/courses/icnd-2/vlans-and-spanning-tree/pvst.html Which command enables RSTP on a switch? A. spanning-tree uplinkfast B. spanning-tree mode rapid-pvst C. spanning-tree backbonefast D. spanning-tree mode mst https://www.learncisco.net/courses/icnd-1/medium-size-switched-network-construction/performance-with-spanning-tree.html Historically, your organization has modified the network device configuration by logging in to the local devices manually. Today, your new CIO has enforced that all configuration changes should be completed on a server in the data center and then pushed out. Which answer lists the correct term for this new approach to configuration? A. Version control B. Centralized configuration C. Configuration drift D. Configuration monitoring Some IOS commands store passwords as clear text, but you can then encrypt the passwords with the service password-encryption global command. By comparison, other commands store a computed hash of the password, rather than storing the password. Comparing the two options, which one answer is the most accurate about why one method is better than the other? A. Using hashes is preferred because encrypted IOS passwords can be easily decrypted. B. Using hashes is preferred because of the large CPU effort required for encryption. C. Using encryption is preferred because it provides stronger password protection. D. Using encryption is preferred because of the large CPU effort required for hashes. Which QoS feature is typically used inbound to a network to limit the amount of traffic that is allowed to flow in? A. Traffic classification B. Traffic shaping C. Traffic limiting D. Traffic policing Which end-to-end connectivity troubleshooting tool tests transport layer connectivity for any port? A. Ping B. Telnet C. Address Resolution Protocol, or ARP D. Traceroute https://www.learncisco.net/courses/icnd-2/troubleshooting-basic-connectivity/troubleshooting-connectivity.html Routing tables can be populated in a number of different ways. Which of the following describes the default route type. A. Router attached to this network B. The router interface has a local IP address C. A system administrator manually enters static routes directly into the configuration D. Learned by exchanging routing information E. Used when no explicit route to a destination is found https://www.learncisco.net/courses/icnd-2/troubleshooting-basic-connectivity/identification-of-the-path.html You are setting up a Cisco IOS router as a DHCP server. Which command is used to identify the IPv4 addresses that will be in the DHCP pool? A. network B. dns-server C. default-router D. ip dhcp excluded-address E. lease F. ip dhcp pool G. domain-name Which QoS feature is typically used outbound to an ISP to reduce the amount of traffic that is dropped by exceeding the purchased rate? A. Traffic shaping B. Traffic policing C. Traffic limiting D. Traffic classification Which of the following protocols is used in redundant layer 2 networks to eliminate the effects of a loop? A. STP B. CDP C. VTP D. DTP Per the command output, with how many routers is router R9 full adjacent over its Gi0/0 interface? A. 7 B. 10 C. 5 D. 2 Which of the following describes the Rapid PVST+ protocol? A. Assumes one 802.1D spanning tree for the entire bridged network B. Provides a separate 802.1D spanning tree for each virtual LAN, or VLAN, configured C. Provides fast conversion with a single instance of STP D. Provides fast conversion with an instance of spanning tree per VLAN https://www.learncisco.net/courses/icnd-2/vlans-and-spanning-tree/stp-protocol-types.html How does the “traceroute“ command allow you to verify if you have connectivity? (Choose two) A. It generates a list of IPv6 hops that successfully reached along the path B. It tests the transport layer connectivity for any TCP port C. It allows observation of the path between two hosts D. It does the same as ARP in IPv4 In a reflection attack, the source IP address in the attack packets is spoofed so that it contains which one of the following entities? A. The address of the attacker B. The address of the reflector C. The address of the victim D. The address of the router What is the administrative distance of RIPv2? A. 110 C. 90 D. 100 E. 1 F. 120 G. 5 Of the figures shown, which depicts an accurate Clos Architecture? A. Topology A B. Topology B C. Topology C D. Topology D Based on the network shown in the graphic. Which option contains both the potential networking problem and the protocol or setting that should be used to prevent the problem? A. routing loops, hold down timers B. switching loops, split horizon C. routing loops, split horizon D. switching loops, VTP E. routing loops, STP F. switching loops, STP Which Cisco IOS command is used to advertise a default route into an OSPF domain regardless of whether a default static route is configured? A. default-information originate B. default-information originate always C. default-information originate permanent D. default-information originate no-check You are implementing a Router on a Stick Inter-VLAN routing solution. What type of interfaces are needed for this implementation? A. Routed ports B. Switched virtual interfaces C. Virtual template D. Tunnel E. Sub-interfaces When comparing controller-based networks and traditional networks what are some perceived benefits from a controller-based perspective? (Choose two) A. New operational models that allow the entire network to be instantiated and not just a single device at a time B. The use of automation through APIs that enable data-driven models C. New operational models that allow for a single device to be instantiated with the entire network in mind D. The use of legacy approaches in the network to increase efficiency and productivity You need to create a wildcard mask for the entire Class B private IPv4 address space; 172.16.0.0/16 through 172.31.0.0/16. What is the wildcard mask? A. 0.0.15.255 B. 0.15.255.255 C. 0.0.31.255 D. 0.31.255.255 E. 0.0.7.255 F. 0.7.255.255 Given the output from a working OSPF router, as seen in the exhibit, how many neighboring routers exist? B. 1 C. 2 D. 3 E. More than 3 What protocols exist to negotiate EtherChannel creation and maintenance? (Choose two) A. LACP B. VTP C. PAgP D. STP A router has two Fast Ethernet interfaces and needs to connect to four VLANs in the local network. How can you accomplish this task, using the fewest physical interfaces and without decreasing network performance? A. Use a hub to connect the four VLANS with a Fast Ethernet interface on the router. B. Add a second router to handle the VLAN traffic. C. Add two more Fast Ethernet interfaces. D. Implement a router-on-a-stick configuration. https://www.learncisco.net/courses/icnd-1/medium-size-switched-network-construction/inter-vlan-routing.html You have configured your PC with multiple default gateways. R1 is the primary default gateway. R2 is the secondary default gateway. What is the best action to ensure redundancy of the default gateway if R1 goes down? A. Create an entry in the R1 routing table to route traffic to R2 B. Manually change the primary default gateway from R1 to R2 C. Ensure that you are using a First Hop Redundancy Protocol D. Nothing, as multiple gateways have been configured In what security zone are the public web servers located? A. DMZ B. Inside C. Outside D. Campus Which of the following are required attributes of a REST-based API? (Choose two) A. Uses HTTP B. Objects noted as to whether they can be cached C. Classful operation D. Client/server architecture You are performing password recovery on your 2900 ISR. You have successfully merged the startup configuration file, changed all the passwords, and enabled all the required interfaces. What else do you need to do in order to complete the password recovery process successfully? (Choose two) A. Copy the contents of NVRAM to RAM B. Copy the running configuration to the startup configuration C. Change the configuration register value D. Issue the boot system command E. Reload the router A poorly designed network typically includes which of the following? (Choose three) A. Security vulnerabilities B. Large broadcast domains C. Small broadcast domains D. Proper documentation E. Management and support challenges You have set up NAT on your edge router for private to public translations. Which of the following can be verified with the show ip nat translations command? (Choose three) A. The inside interface and outside interface B. The public IPv4 address that a private IPv4 address was translated to C. The private IPv4 address that was translated D. The NAT pool that is being used E. The ACL that is being used F. The public IPv4 address that the translated packet is destined When comparing next-generation IPS to traditional IPS, what additional capabilities can be leveraged to more efficiently block traffic? (Choose three) A. AVC B. Signature-based filtering C. Contextual awareness D. Event impact level How many default vty lines exist on a Cisco IOS router? A. 20 B. 1 C. 5 D. 10 E. 15 Devices using a wireless LAN must operate in which one of the following modes? A. Round-robin access B. Half duplex C. Full duplex D. None of these answers You can use the Cisco IOS ”copy” command to move configurations from one component or device to another. Which of the following commands will delete the configuration in the NVRAM? A. erase startup-config B. copy tftp running-config C. copy running-config tftp D. copy running-config startup-config https://www.learncisco.net/courses/icnd-1/network-environment-management/managing-devices.html To connect a Cisco wireless LAN controller to a wired network, which of the following would you use? Assume that this connection will carry traffic to and from APs. A. Console port B. Service port C. Distribution system port D. AP data port The IPv6 address “2001:db8:abc:1234:0290:27ff:fe17:fc0f/64“ is assigned to a device. How was the interface portion assigned? A. Manually, using DHCPv6 B. Dynamically, using a random generator C. Manually by an administrator D. Dynamically, using EUI-64 The type of service field in an IPv4 header is used for QoS. Which field in the IPv6 header is used for QoS? A. Traffic class B. Flow label C. Next header D. Source address E. Hop limit F. Destination address Think about a policing function that is currently working, and also think about a shaping function that is also currently working. That is, the current bit rate of traffic exceeds the respective policing and shaping rates. Which statements are true about these features? (Choose two) A. The policer may or may not be discarding packets. B. The policer is definitely discarding packets. C. The shaper may or may not be queuing packets to slow down the sending rate. D. The shaper is definitely queuing packets to slow down the sending rate. Which option is not one of the most commonly deployed virtualization vendors and products? A. Oracle XenSpace B. Microsoft Hyper-V C. VMware vCenter D. Red Hat KVM An enterprise plans to start using a public cloud service and is considering different WAN options. The answers list four options under consideration. Which one option has the most issues if the company chooses one cloud provider but then later wants to change to use a different cloud provider instead? A. Using private WAN connections directly to the cloud provider B. Using an Internet connection without VPN C. Using an intercloud exchange D. Using an Internet connection with VPN You are configuring dynamic NAT on your Cisco IOS router. Which command is used to verify the interfaces that are being used as the outside interface and the inside interface? A. show interfaces B. show ip route C. show ip nat translations D. show ip interface brief E. show ip interface F. show ip nat statistics You can use output filters in combination with any show command. Which of the following displays the full area of output that starts with the filtering expression? A. include B. exclude C. begin D. section https://www.learncisco.net/courses/icnd-1/lan-connections/starting-a-router.html

Our Recommended Premium CCNA Training Resources

These are the best CCNA training resources online:

Click Here to get the Cisco CCNA Gold Bootcamp, the most comprehensive and highest rated CCNA course online with a 4.8 star rating from over 30,000 public reviews. I recommend this as your primary study source to learn all the topics on the exam.

Want to take your practice tests to the next level? AlphaPrep’s purpose-built Cisco test engine has the largest question bank, adaptive questions, and advanced reporting which tells you exactly when you’re ready to pass the real exam. Click here for your free trial.

The CCNA 200-301 is for the Cisco Certified Network Associate (CCNA) Implementing and Administering Cisco Solutions exam. You can use the practice test to check your knowledge and improve your understanding in preparation for the Cisco CCNA certification exam.

The Cisco CCNA 200-301 practice exam tests include questions to test your knowledge and skills related to Cisco networking fundamentals, which helps you pass the actual exam.

The Cisco CCNA exam objectives include Cisco network fundamentals on routers, switches, IP addresses, etc., network access, IP connectivity such as static and dynamic routing protocol, IP services, network security fundamentals, and automation and programmability.

Cisco CCNA 200-301 Practice Test

Complete this form to get your score report

Our Recommended Premium CCNA Training Resources