Cisco CCNA 200-301 Practice Test

Cisco Practice Tests

Question 1 / 55 - Mode : Exam
With IEEE 802.1x, which role does a LAN switch typically play? A. Authentication server B. Supplicant C. Translator D. Authenticator Which IPv6 command allows you to verify general parameters such as the reference bandwidth? A. show ipv6 ospf interface brief B. show ipv6 ospf C. show ipv6 route summarization D. show ipv6 protocols You have an address of 172.16.142.10/21. What are the network ID, directed broadcast, first host, and the last host? A. The network ID is 172.16.140.0, the directed broadcast is 172.16.148.255, the first host is 172.16.140.1, and the last host is 172.16.148.254 B. The network ID is 172.16.96.0, the directed broadcast is 172.16.168.255, the first host is 172.16.96.1, and the last host is 172.16.168.254 C. The network ID is 172.16.128.0, the directed broadcast is 172.16.163.255, the first host is 172.16.128.1, and the last host is 172.16.163.254 D. The network ID is 172.16.136.0, the directed broadcast is 172.16.143.255, the first host is 172.16.136.1, and the last host is 172.16.143.254 https://www.learncisco.net/courses/icnd-1/lan-connections/network-addressing-scheme.html Which of the following describes a dynamic NAT configuration? A. Manually configured, one-to-one address mapping B. Automatically assigned from an address pool, many-to-many address mapping C. Many-to-one address mapping https://www.learncisco.net/courses/icnd-1/acls-and-nat/address-translation.html A switch’s port Gi0/1 has been correctly enabled with port security. The configuration sets the violation mode to restrict. A frame that violates the port security policy enters the interface, followed by a frame that does not. Which of the following answers correctly describe what happens in this scenario? (Choose two) A. The switch puts the interface into an err-disabled state when the first frame arrives. B. The switch generates syslog messages about the violating traffic for the first frame. C. The switch increments the violation counter for Gi0/1 by 1. D. The switch discards both the first and second frame. Which DSCP Assured Forwarding value provides the worst drop and worst queue performance? A. AF41 B. AF43 C. AF11 D. AF13 In what security zone are the public web servers located? A. DMZ B. Inside C. Outside D. Campus What occurs when there are no more port numbers for PAT to use during translation? A. Packets are forwarded as is B. A port number will be chosen from the range 512 to 1023 C. A port number will be chosen from the range 1024 to 65535 D. Packets are dropped E. Packets are buffered until there are available port numbers F. A port number will be chosen from the range 0 to 511 Which port state is introduced by Rapid-PVST? A. learning B. listening C. discarding D. forwarding https://www.learncisco.net/courses/icnd-2/vlans-and-spanning-tree/stp-protocol-types.html What is the default security violation mode for port security on a Cisco 2960 Catalyst switch? A. Disable B. Shutdown C. Protect D. None E. Restrict F. Err-disable Think about a policing function that is currently working, and also think about a shaping function that is also currently working. That is, the current bit rate of traffic exceeds the respective policing and shaping rates. Which statements are true about these features? (Choose two) A. The policer may or may not be discarding packets. B. The policer is definitely discarding packets. C. The shaper may or may not be queuing packets to slow down the sending rate. D. The shaper is definitely queuing packets to slow down the sending rate. You are troubleshooting a connectivity issue on the Branch router when you realize that a ping test to the destination network is not successful. The Branch and corresponding HQ router have their neighbor adjacency set up. What could be the problem? (Choose two) A. The HQ router isn't advertising the route B. There is an OSPF area mismatch C. The HQ router is not enabled for OSPF D. There is a route missing to the destination in the Branch router`s routing table E. Layer 2 connectivity is not established between the two routers https://www.learncisco.net/courses/icnd-2/troubleshooting-basic-connectivity/troubleshooting-connectivity.html Which DSCP marking group was created to be backward compatible with Internet Protocol Precedence (IPP) values? A. EF B. AF C. CS D. PF What versions of Wi-Fi Protected Access (WPA) were defined after the IEEE ratified the IEEE 802.11i security standard? (Choose two) A. WPA B. WPA2 C. WPA3 D. WPA0 Each virtual OS instance that exists on a server is referred to as a ___________ A. KVM B. VM C. CSR D. hypervisor Which physical layer media are used today for connecting network devices (switches and routers) together in a LAN? (Choose two) A. Coaxial B. Twisted copper pair C. Fiber optic D. Wireless Which cloud service is specific to one company that owns both the tools/infrastructure that creates the cloud and the people that use the services? A. Hybrid cloud B. Public cloud C. Private cloud D. Internal cloud You are troubleshooting DNS and want to use a static mapping locally as part of your test. In Windows, in which file can you specify the name for an IPv6 mapping? A. Hosts B. lmhosts C. IPv6hosts D. Addresses Which of the following is required when configuring port security with sticky learning? A. Setting the maximum number of allowed MAC addresses on the interface with the switchport port-security maximum interface subcommand B. Enabling port security with the switchport port-security interface subcommand C. Defining the specific allowed MAC addresses using the switchport port-security mac-address interface subcommand D. All the other answers list required commands Four OSPF routers connect to the same LAN. In a new election after all routers have been rebooted, which router wins the DR election? A. R4, router-id 4.4.4.4, priority 1 B. R3, router-id 3.3.3.3, priority 2 C. R1, router-id 1.1.1.1, priority 4 D. R2, router-id 2.2.2.2, priority 3 Regarding lightweight AP modes, which one of the following is true? A. An AP can operate in multiple modes at the same time. B. An AP only has one possible mode of operation. C. The Run mode is the default mode. D. The SE-Connect mode is used for spectrum analysis. You are configuring dynamic NAT on a Cisco IOS router. What is used to define the public IPv4 address that will be used for translations? A. An extended access list B. A DHCP pool C. The inside interface D. A NAT pool E. A standard access list F. The outside interface An engineer connects to Router R1 and issues a show ip ospf neighbor command. The status of neighbor 2.2.2.2 lists FULL/BDR. What does the BDR mean? A. R1 is an Area Border Router. B. R1 is a backup designated router. C. Router 2.2.2.2 is an Area Border Router. D. Router 2.2.2.2 is a backup designated router. What can be verified in the output of show interfaces trunk? (Choose five) A. The VLANs allowed on the trunk B. The encapsulation method used for the trunk C. The access vlan the port is a member of if it is not a trunk D. The interfaces are trunks E. The Native VLAN for the trunk F. The administrative mode used to form the trunk G. If DTP is enabled or disabled Which of the following route types is used when the route is manually configured by a system administrator? A. Directly connected B. Default route C. Dynamic routing D. Static routing https://www.learncisco.net/courses/icnd-1/ip-routing-technologies/static-routing.html Identify the commands required to verify both - the IP addresses of a switch and a host. (Choose two) A. show interface status B. show ip interface brief C. ipconfig /renew D. ipconfig /release E. ipconfig /all https://www.learncisco.net/courses/icnd-1/lan-connections/starting-a-router.html Which configuration mode would you use to configure a particular port on a switch? A. Controller configuration mode B. User EXEC mode C. Global configuration mode D. Interface configuration mode https://www.learncisco.net/courses/icnd-1/ethernet-lans/starting-a-switch.html Which OSPF verification commands describe the operations they perform? (Choose two) A. The [show ip protocols] command displays the neighbor priorities along with interface dead timers. B. The [show ip route ospf] command is used to verify the OSPF status as well as which routing protocols are configured on a router. C. The [show ip ospf interface] command displays OSPF-related information on OSPF-enabled interfaces. D. The [show ip ospf neighbor] command displays the neighbor router ID, OSPF state, neighbor interface IP address and interface through which the neighbor is accessible. https://www.learncisco.net/courses/icnd-2/implementing-a-multiarea-ospf-solution/troubleshooting-multiarea-ospf.html Which command will assign a static link-local address to an interface? A. ipv6 address 2001::12:1 link-local B. ipv6 address 2001::12:1/64 link-local C. ipv6 address 2001::12:1 D. ipv6 address fe80::12:1/64 link-local E. ipv6 address fe80::12:1 link-local F. ipv6 address fe80::12:1 Which of the following four TCP/IP layers supports network APIs that allow programs created for a particular operating system to access the network? A. Network Access B. Transport C. Internet D. Application https://www.learncisco.net/courses/icnd-1/building-a-network/host-to-host-communications.html What are the functions of the active router when there is L3 redundancy? (Choose four) A. Sends out hello messages B. Knows the IP address of the virtual router C. Active forwarding of packets for the virtual router is assumed D. Default gateway ARP requests are responded to with the virtual router MAC E. Listens for periodic hello messages F. If the other router is not heard from, it assumes active forwarding of packets https://www.learncisco.net/courses/icnd-2/etherchannel-and-l3-redundancy/gateway-redundancy.html Using the exhibit as a reference, how many JSON objects are there? A. 11 B. 1 C. 2 D. 12 Which of the following are available methods of classifying packets in DiffServ on Cisco routers? (Choose three) A. Matching the IP DSCP field B. Matching the 802.1p CoS field C. Matching fields with an extended IP ACL D. Matching the SNMP Location variable From the following options, what are the required REST API attributes? (Choose two) A. JSON-formatted data B. Unlayered systems C. Layered systems D. Client-server architecture At which phase of the DHCP process will a DHCP server provide the client with an IP address, subnet mask, and default gateway? A. Request B. Acknowledge C. Discover D. Offer If EX is the code for EIGRP External Routes, then what is the code for EIGRP Internal Routes? A. IX B. L C. I D. D Which cloud service model provides access to an application that is built, monitored, and offered by the cloud provider? A. TaaS B. IaaS C. PaaS D. SaaS Which of the following reserved IPv4 addresses has binary 0s in all of the host bit positions? A. Local broadcast address B. Loopback address C. Directed broadcast address D. Network address E. All zeros address https://www.learncisco.net/courses/ccna/part-2-ip-addressing-and-subnetting-nat/network-addressing.html Which statements correctly define variable-length subnet masking (VLSM)? (Choose two) A. The process of creating subnets with different length masks and deploying them throughout the network B. The process of creating subnets with the same length masks and deploying them throughout the network C. The process of taking a default Class A, B, or C network and subnetting it D. The process of taking an existing subnet and subnetting it again When planning a greenfield SDA design, what traditional LAN design points should be included? (Choose two) A. The number of switchports needed in each switch B. The required speed of the switchports C. A security firewall to properly segment traffic D. The Spanning Tree mode of operation to use What will occur when you issue the “copy running-config startup-config“ command on your IOS device? A. The configuration in FLASH will replace the configuration in RAM B. The configuration in NVRAM will replace the configuration in RAM C. The configuration in FLASH will merge with the configuration in RAM D. The configuration in NVRAM will merge with the configuration in RAM E. The configuration in RAM will replace the configuration in NVRAM Which technology do we use to turn the public Internet into a private secure environment? A. Core Access B. Intranet C. Distribution Access D. VPN If you want to be alerted when a device configuration differs from the intended configuration, what should you implement? A. Version control B. Centralized configuration C. Configuration drift D. Configuration monitoring Refer to the exhibit. A technician is troubleshooting host connectivity issues on the switches. The hosts in VLANs 10 and 15 on Sw11 are unable to communicate with hosts in the same VLANs on Sw12. Hosts in the Admin VLAN are able to communicate. The port-to-VLAN assignments are identical on the two switches. What could be the problem? A. The Fa0/1 port is not operational on one of the switches. B. The link connecting the switches has not been configured as a trunk. C. At least one port needs to be configured in VLAN 1 for VLANs 10 and 15 to be able to communicate. D. Port FastEthernet 0/1 needs to be configured as an access link on both switches. E. A router is required for hosts on SW11 in VLANs 10 and 15 to communicate with hosts in the same VLAN on Sw12. You are currently using PAT to translate private IPv4 addresses to the public IPv4 address of your router interface. Users complain that on occasion Internet connections fail. You determine that these failures are a result of PAT running out of port numbers for unique translations. What should you do to resolve this issue? A. Obtain another public IPv4 address from your ISP and configure it on another router interface along with the ip nat outside command B. Purchase more port numbers from your ISP and assign them to NAT C. Obtain another public IPv4 address from your ISP configure static NAT D. Obtain another public IPv4 address from your ISP and configure dynamic NAT E. Obtain another public IPv4 address from your ISP and use both IPv4 addresses in a NAT pool that PAT will use for overloading Wired Ethernet and Wi-Fi are based on which two IEEE standards, respectively? A. 802.1, 802.3 B. 802.1, 802.3 C. 802.3, 802.11 D. 802.11, 802.3 enable secret [password] is hashed using the _______ algorithm. A. MD5 B. AH C. PSK D. ESP E. WPA2 Review the topology. All subnets exist in OSPF area 0. Which command, if issued on R3, would show all the LSAs known by R3? A. Show running-config B. Show ip ospf interface C. Show ip ospf neighbors D. Show ip route ospf E. Show ip ospf database You have HRSP configured on your network with R1 as the active default gateway and R2 as the standby default gateway. What is the best way to configure PC1 to ensure that it is using a redundant default gateway? A. Create a default route to R2, in case R1 goes down B. Ensure that the same priority is assigned to R1 and R2 C. Ensure that it is assigned the virtual default gateway D. Ensure that it is configured with two default gateways Refer to the exhibit; in which area would R1’s Gi0/0 interface be placed? A. 5 B. 6 C. 10 D. 11 Which of the following is valid for Single-area OSPF design type? (Choose two) A. Using summarization results in smaller routing tables B. A better solution for efficient routing C. Every router is required to process many link-state advertisements (LSAs) D. Larger routing tables are required https://www.learncisco.net/courses/icnd-2/implementing-a-multiarea-ospf-solution/multiarea-ospf-planning.html Which of the following correctly define the NATIVE VLAN? (Choose three) A. It must match on both ends of a trunk link B. It is VLAN 1 by default C. It is only available with 802.1q encapsulation D. It is available with both ISL and 802.1q encapsulation E. It is not associated with any VLAN by default F. It is only available with ISL encapsulation G. It must be configured as VLAN 1 if used When comparing controller-based networks and traditional networks what are some perceived benefits from a controller-based perspective? (Choose two) A. New operational models that allow the entire network to be instantiated and not just a single device at a time B. The use of automation through APIs that enable data-driven models C. New operational models that allow for a single device to be instantiated with the entire network in mind D. The use of legacy approaches in the network to increase efficiency and productivity Which statements define the term block size? (Choose two) A. It is determined exclusively based on the subnet mask B. It is always a value of 8 C. It is the total number of IPv4 addresses within a subnet D. It is the progression between subnets within a specific octet E. It is determined based on the IPv4 address and subnet mask F. It is always a value of 2 When comparing next-generation IPS to traditional IPS, what additional capabilities can be leveraged to more efficiently block traffic? (Choose three) A. AVC B. Signature-based filtering C. Contextual awareness D. Event impact level

Our Recommended Premium CCNA Training Resources

These are the best CCNA training resources online:

Click Here to get the Cisco CCNA Gold Bootcamp, the most comprehensive and highest rated CCNA course online with a 4.8 star rating from over 30,000 public reviews. I recommend this as your primary study source to learn all the topics on the exam.

Want to take your practice tests to the next level? AlphaPrep’s purpose-built Cisco test engine has the largest question bank, adaptive questions, and advanced reporting which tells you exactly when you’re ready to pass the real exam. Click here for your free trial.

The CCNA 200-301 is for the Cisco Certified Network Associate (CCNA) Implementing and Administering Cisco Solutions exam. You can use the practice test to check your knowledge and improve your understanding in preparation for the Cisco CCNA certification exam.

The Cisco CCNA 200-301 practice exam tests include questions to test your knowledge and skills related to Cisco networking fundamentals, which helps you pass the actual exam.

The Cisco CCNA exam objectives include Cisco network fundamentals on routers, switches, IP addresses, etc., network access, IP connectivity such as static and dynamic routing protocol, IP services, network security fundamentals, and automation and programmability.

Cisco CCNA 200-301 Practice Test

Complete this form to get your score report

Our Recommended Premium CCNA Training Resources