Cisco CCNA 200-301 Practice Test

Cisco Practice Tests

Question 1 / 55 - Mode : Exam
Which options are not one of the manageable QoS characteristics of network traffic? (Choose two) A. Delay B. Jitter C. Queue size D. Clock rate E. Bandwidth F. Loss Identify the fields in an IPv4 header. (Choose three) A. Host component B. Time to Live C. Source address D. Destination address E. Network address https://www.learncisco.net/courses/icnd-1/building-a-network/tcpip-internet-layer.html Which cloud service model is primarily targeted toward the software development community and provides the ability to not only customize the hardware being virtualized but also offer different development tools and utilities that are commonly used for a specific environment? A. TaaS B. IaaS C. SaaS D. PaaS Identify the statements that describe the functions of Simple Network Management Protocol, or SNMP. (Choose two) A. Provides a message format for communication between managers and agents B. Graphs analyzed statistical results C. Protects sensitive data and file systems through encryption services D. Reports malicious network activity, such as hacking https://www.learncisco.net/courses/icnd-2/network-management/snmp-v1-v2c-v3-overview-and-configuration.html What is the name of the protocol that is used by IEEE 802.1x devices to communicate with the authenticator and authentication server? A. EAP B. EAPoL C. RADIUS D. TACACS+ Wired Ethernet and Wi-Fi are based on which two IEEE standards, respectively? A. 802.1, 802.3 B. 802.1, 802.3 C. 802.3, 802.11 D. 802.11, 802.3 You are implementing a Router on a Stick Inter-VLAN routing solution. What type of interfaces are needed for this implementation? A. Routed ports B. Switched virtual interfaces C. Virtual template D. Tunnel E. Sub-interfaces You need to create a standard IPv4 ACL entry that will deny all packets sourced from the Class C private IP address space. Which of these options is the correct ACL entry? A. access-list 10 deny 172.16.0.0 0.15.255.255 B. access-list 10 deny any C. access-list 10 deny 10.0.0.0 0.0.0.255 D. access-list 10 deny 10.0.0.0 0.255.255.255 E. access-list 10 deny 192.168.0.0 0.0.255.255 F. access-list 10 deny 192.168.0.0 0.0.0.255 G. access-list 10 deny 172.16.0.0 0.0.15.255 What is one benefit of PVST+? A. PVST+ supports Layer 3 load balancing without loops. B. PVST+ reduces the CPU cycles for all the switches in the network. C. PVST+ allows the root switch location to be optimized per VLAN. D. PVST+ automatically selects the root bridge location, to provide optimized bandwidth usage. https://www.learncisco.net/courses/icnd-2/vlans-and-spanning-tree/pvst.html Which command should you use on a router to verify the presence of a default gateway? A. show ip route B. tracert C. traceroute D. route print https://www.learncisco.net/courses/icnd-2/troubleshooting-basic-connectivity/identification-of-the-path.html Which of the following components contains the running copy of the configuration file? A. Interface B. ROM C. Flash D. RAM E. CPU F. NVRAM https://www.learncisco.net/courses/icnd-2/network-management/router-internal-components-overview.html What is the function of the command switchport trunk native vlan 999 on a Cisco Catalyst switch? A. It creates a VLAN 999 interface. B. It designates VLAN 999 for untagged traffic. C. It blocks VLAN 999 traffic from passing on the trunk. D. It designates VLAN 999 as the default for all unknown tagged traffic. https://www.learncisco.net/courses/icnd-1/medium-size-switched-network-construction/vlans-and-trunk.html Among other things, switches are used to connect three or more devices together to enable communication between hosts. Identify the other functions of switches. (Choose three) A. Segment a large LAN into many smaller segments by using full-duplex ports B. Forward, filter, or flood frames based on Medium Access Control, or MAC, addresses C. Build and maintain a routing table that matches destination IP addresses with specific ports D. Switch traffic as fast as possible, supporting different port speeds E. Operate at the Internet layer of the TCP/IP protocol suite https://www.learncisco.net/courses/icnd-1/ethernet-lans/developing-design-for-layer-2.html You have set up NAT on your edge router for private to public translations. Which of the following can be verified with the show ip nat translations command? (Choose three) A. The inside interface and outside interface B. The public IPv4 address that a private IPv4 address was translated to C. The private IPv4 address that was translated D. The NAT pool that is being used E. The ACL that is being used F. The public IPv4 address that the translated packet is destined Of the different public cloud WAN options, which have quality of service capabilities to ensure end-to-end application requirements? (Choose three) A. Internet B. Intercloud exchange C. Ethernet WAN D. MPLS VPN E. Internet VPN Which of the following is describing the Nonegotiate mode of Dynamic Trunking Protocol? A. Creates a trunk with the neighboring switch based on the DTP request B. Enables trunking on the interface C. Trunking cannot take place on the port regardless of DTP requests D. Sends a DTP communication that it wants to create a trunk with the neighboring switch E. DTP frames are prevented from being generated from the port https://www.learncisco.net/courses/icnd-2/vlans-and-spanning-tree/dynamic-trunking-protocol.html Which actions must be performed to implement SNMP access to the router? (Choose two) A. Configure a community access string with a read-write privileged to permit access to SNMP B. Authenticate access to MIB objects and functions as embedded passwords C. Set the system contact and location of the SNMP agent on the router D. Obtain values for the 5 minute exponentially moving average of the CPU busy percentage https://www.learncisco.net/courses/icnd-2/network-management/snmp-v1-v2c-v3-overview-and-configuration.html What can be verified in the output of show interfaces trunk? (Choose five) A. The VLANs allowed on the trunk B. The encapsulation method used for the trunk C. The access vlan the port is a member of if it is not a trunk D. The interfaces are trunks E. The Native VLAN for the trunk F. The administrative mode used to form the trunk G. If DTP is enabled or disabled In a reflection attack, the source IP address in the attack packets is spoofed so that it contains which one of the following entities? A. The address of the attacker B. The address of the reflector C. The address of the victim D. The address of the router Which of the following route types is used when one of the router`s interfaces is attached to the network? A. Directly connected B. Default route C. Dynamic routing D. Static routing https://www.learncisco.net/courses/icnd-1/ip-routing-technologies/static-routing.html What command is used to prevent an interface from forming neighbor adjacency? A. router ospf B. passive-interface C. ip ospf D. default-information originate https://www.learncisco.net/courses/icnd-1/ip-routing-technologies/single-area-ospf.html Which of the following is required when configuring port security with sticky learning? A. Setting the maximum number of allowed MAC addresses on the interface with the switchport port-security maximum interface subcommand B. Enabling port security with the switchport port-security interface subcommand C. Defining the specific allowed MAC addresses using the switchport port-security mac-address interface subcommand D. All the other answers list required commands Refer to the diagram. What method of authentication is being used? A. Open authentication B. CCMP C. WEP D. 802.1x Of the figures shown, which depicts an accurate Clos Architecture? A. Topology A B. Topology B C. Topology C D. Topology D Which IOS command always displays OSPF hello timer settings? A. show ip protocols B. show ip route C. show ip ospf interface D. show ip ospf neighbor E. debug ip ospf events What are some of the wireless LAN controller (WLC) capabilities? A. Security management B. Dynamic RF management to assign channels to APs C. RF monitoring to gather information about the channel D. Ease of deployment by programming all RF policies and wireless LAN policies on all APs E. All of these are correct. Which of the following are required attributes of a REST-based API? (Choose two) A. Uses HTTP B. Objects noted as to whether they can be cached C. Classful operation D. Client/server architecture What are the characteristics of a VLAN? (Choose two) A. It allows you to segment users by function as long as they are in the same LAN segment B. It offers segmentation of broadcast domains C. It replaces the use of broadcast domains in your network D. It allows you to logically segment a network Which hash method is used by default when using the enable secret Cisco IOS command? A. 3DES B. MD5 C. SHA-0 D. HMAC A network uses an SDN architecture with switches and a centralized controller. Which of the following terms describes a function or functions expected to be found on the switches but not on the controller? A. A Northbound Interface B. A Southbound Interface C. Data plane functions D. Control plane functions You want to view the OSPF neighbor information on a per-interface basis. Which of the following commands can accomplish this? A. show ospf neighbors B. show ip ospf neighbor C. show ip interface D. show ospf summary https://www.learncisco.net/courses/icnd-1/ip-routing-technologies/single-area-ospf.html Which command could you enter to encrypt passwords? A. enable secret B. username {username} secret {password} C. service password-encryption D. All of the above E. None of the above Which configuration mode would you use to configure a particular port on a switch? A. Controller configuration mode B. User EXEC mode C. Global configuration mode D. Interface configuration mode https://www.learncisco.net/courses/icnd-1/ethernet-lans/starting-a-switch.html R1, R2, R3, and R4 have their Fast Ethernet 0/0 interfaces attached to the same VLAN. A network engineer has typed a configuration for each router by using a word processor. He will later copy and paste the configuration into the routers. Examine the following exhibit, which lists configuration for the four routers, as typed by the network engineer. Assuming that all four routers can ping each other’s LAN IP addresses after the configuration has been applied, choose the routers that will be able to form a neighbor relationship with the other routers on the LAN. (You can assume that, if not shown in the exhibit, all other related parameters are still set to their defaults.) (Choose two) A. R1 B. R2 C. R3 D. R4 E. None of the routers will exchange routing information. You are setting up remote access on your Cisco IOS switch. What is the purpose of the “login“ command when issued in [line vty] configuration mode? A. It prompts remote users to provide a password B. It allows remote users to connect without a password C. It enables remote login D. It disables remote login E. It grants the login privileged level Which of the following subnet masks are classful? (Choose three) A. 255.255.0.0 B. 255.0.0.0 C. 255.255.192.0 D. 255.255.255.240 E. 255.255.255.0 https://www.learncisco.net/courses/icnd-1/lan-connections/network-addressing-scheme.html Which statements describe how to secure remote access to a network device? (Choose two) A. Enable password checking B. Prevent users from remaining connected to a virtual type terminal, or vty, port C. Disable unused ports D. Restrict access using port security https://www.learncisco.net/courses/icnd-1/lan-connections/cisco-router-security.html What is the name of the Cisco feature that allows for the identification of protocols that are traditionally hard to classify because of their operation? A. DSCP B. NBAR C. DTerm D. CBWFQ Which of the following layer 2 WAN protocols is the most scalable transport technology ever developed? A. HDLC B. Ethernet C. Frame Relay D. ATM E. PPP https://www.learncisco.net/courses/icnd-2/wan-technologies/serial-encapsulation.html What is the best definition of a WAN? A. Remote access to resources across a high speed link B. Local access to resources C. Local Internet access D. Core network resources Connections can be verified using a variety of troubleshooting commands. Which of the following commands uses ICMP messages to determine whether a host is active? A. netstat B. tracert C. ping D. nslookup https://www.learncisco.net/courses/icnd-1/lan-connections/packet-delivery-process-at-l3.html In the virtualization world, the ___________ manages and allocates the host hardware for each VM. A. Host controller B. Hyperthreader C. Hypervisor D. Host service Which statements define dynamic NAT when used for private to public translations? A. Dynamic NAT only translates public addresses matching an ACL to private addresses that are defined in a NAT pool B. Dynamic NAT only translates private addresses matching an ACL to public addresses that are defined in a NAT pool C. Dynamic NAT only translates private addresses that are defined in a NAT pool to public addresses matching an ACL D. Dynamic NAT allows multiple private addresses to be translated to the same public address __________ means that the QoS tool changes one or more header fields, setting a value in the header. A. Marking B. Classifying C. Insertion D. Qualifying The show port-security interface f0/1 command lists a port status of Secure-shutdown. Which of the following answer must be true about this interface at this time? A. The show interface status command lists the interface status as connected. B. The show interface status command lists the interface status as err-disabled. C. The show port-security interface command could list a mode of shutdown or restrict, but not protect. D. The show port-security interface command could list a violation counter value of 10. Looking at the exhibit, what key:value pair option has a value that is numeric in nature? A. ”upTime”: ”45 days, 13:36:14.80”, B. ”lastUpdated”: ”2019-10-29 02:52:00”, C. ”managementIpAddress”: ”10.230.1.1”, D. ”lastUpdateTime”: 1572317520439 Given the output from a working OSPF router, as seen in the exhibit, how many neighboring routers exist? B. 1 C. 2 D. 3 E. More than 3 You need to verify the various file systems that are available on your Cisco IOS router. Which command can you use to accomplish this? A. show ram B. show nvram C. show flash D. show control-plane host open-ports E. show file systems When planning a greenfield SDA design, what traditional LAN design points should be included? (Choose two) A. The number of switchports needed in each switch B. The required speed of the switchports C. A security firewall to properly segment traffic D. The Spanning Tree mode of operation to use Which features make IPv6 an improvement over IPv4 addressing? (Choose two) A. Uses Time to Live, or TTL, values in the header B. Security and mobility build into the standard C. Larger address space D. Offers approximately 4.3 billion addresses https://www.learncisco.net/courses/icnd-1/introducing-ipv6/the-ipv6-address.html Which of the following attributes do QoS tools manage? (Choose three) A. Bandwidth B. Delay C. Load D. MTU E. Loss Which term describes a spanning-tree network that has all switch ports in either the blocking or forwarding state? A. converged B. redundant C. provisioned D. spanned https://www.learncisco.net/courses/icnd-2/vlans-and-spanning-tree/stp-protocol-types.html You need to apply an access-list to the vty lines on your router so that you can control which users can make telnet and ssh connections to the device. Which command in line vty configuration mode will apply the access-list to the vty lines? A. ip access-group access-list-number out B. access-class access-list-number out C. access-class access-list-number in D. ip access-group access-list-number in E. access-list access-list-number in F. ip access-list access-list-number in G. access-list access-list-number out Per the command output, with how many routers is router R9 full adjacent over its Gi0/0 interface? A. 7 B. 10 C. 5 D. 2 What happens if there are no boot system commands in the configuration? A. The router attempts to boot from a network TFTP server B. The router defaults to loading and running the first valid Cisco IOS image in the Flash memory C. The router loads the ROM monitor D. The router parses the startup configuration file in NVRAM https://www.learncisco.net/courses/icnd-2/network-management/router-power-on-boot-sequence-config-register.html

Our Recommended Premium CCNA Training Resources

These are the best CCNA training resources online:

Click Here to get the Cisco CCNA Gold Bootcamp, the most comprehensive and highest rated CCNA course online with a 4.8 star rating from over 30,000 public reviews. I recommend this as your primary study source to learn all the topics on the exam.

Want to take your practice tests to the next level? AlphaPrep’s purpose-built Cisco test engine has the largest question bank, adaptive questions, and advanced reporting which tells you exactly when you’re ready to pass the real exam. Click here for your free trial.

The CCNA 200-301 is for the Cisco Certified Network Associate (CCNA) Implementing and Administering Cisco Solutions exam. You can use the practice test to check your knowledge and improve your understanding in preparation for the Cisco CCNA certification exam.

The Cisco CCNA 200-301 practice exam tests include questions to test your knowledge and skills related to Cisco networking fundamentals, which helps you pass the actual exam.

The Cisco CCNA exam objectives include Cisco network fundamentals on routers, switches, IP addresses, etc., network access, IP connectivity such as static and dynamic routing protocol, IP services, network security fundamentals, and automation and programmability.

Cisco CCNA 200-301 Practice Test

Complete this form to get your score report

Our Recommended Premium CCNA Training Resources