Cisco CCNA 200-301 Practice Test

Cisco Practice Tests

Question 1 / 55 - Mode : Exam
When comparing controller-based networks and traditional networks what are some perceived benefits from a controller-based perspective? (Choose two) A. New operational models that allow the entire network to be instantiated and not just a single device at a time B. The use of automation through APIs that enable data-driven models C. New operational models that allow for a single device to be instantiated with the entire network in mind D. The use of legacy approaches in the network to increase efficiency and productivity What steps are involved in configuring IPv4 extended access lists? (Choose three) A. Create an extended named ACL B. Apply the ACL globally to the router C. Apply the ACL to an interface D. Specify the conditions to permit or deny packets E. Ensure that the ACL ends with a Deny ALL statement Which layer of the OSI model provides services only to applications outside the OSI model? A. Session B. Network C. Transport D. Application E. Data-link F. Presentation https://www.learncisco.net/courses/icnd-1/building-a-network/host-to-host-communications.html Per the command output, with how many routers is router R9 full adjacent over its Gi0/0 interface? A. 7 B. 10 C. 5 D. 2 Refer to the exhibit. A technician has installed SwitchB and needs to configure it for remote access from the management workstation connected to SwitchA. Which set of commands is required to accomplish this task? A. SwitchB(config)# interface FastEthernet 0/1 SwitchB(config-if)# ip address 192.168.8.252 255.255.255.0 SwitchB(config-if)# no shutdown B. SwitchB(config)# interface vlan 1 SwitchB(config-if)# ip address 192.168.8.252 255.255.255.0 SwitchB(config-if)# ip default-gateway 192.168.8.254 255.255.255.0 SwitchB(config-if)# no shutdown C. SwitchB(config)# ip default-gateway 192.168.8.254 SwitchB(config)# interface vlan 1 SwitchB(config-if)# ip address 192.168.8.252 255.255.255.0 SwitchB(config-if)# no shutdown D. SwitchB(config)# ip default-network 192.168.8.254 SwitchB(config)# interface vlan 1 SwitchB(config-if)# ip address 192.168.8.252 255.255.255.0 SwitchB(config-if)# no shutdown E. SwitchB(config)# ip route 192.168.8.254 255.255.255.0 SwitchB(config)# interface FastEthernet 0/1 SwitchB(config-if)# ip address 192.168.8.252 255.255.255.0 SwitchB(config-if)# no shutdown Which cloud service model gives a customer complete control over the virtual hardware components, including processor performance, network connectivity, how much memory and storage space is required, and potentially the operating system that is preinstalled? A. SaaS B. IaaS C. PaaS D. TaaS A Cisco Catalyst switch connects to what should be individual user PCs. Each port has the same port security configuration, configured as follows: interface range gigabitethernet 0/1 - 24 switchport mode access switchport port-security switchport port-security mac-address sticky Which of the following answers describe the result of the port security configuration created with these commands? (Choose two) A. Prevents unknown devices with unknown MAC addresses from sending data through the switch ports. B. If a user connects a switch to the cable, prevents multiple devices from sending data through the port. C. Will allow any one device to connect to each port, and will save that device’s MAC address into the startup-config D. Will allow any one device to connect to each port, but will not save that device’s MAC address into the startup-config Refer to the exhibit. A new subnet with 60 hosts has been added to the network. Which subnet address should this network use to provide enough usable addresses while wasting the fewest addresses? A. 192.168.1.56/26 B. 192.168.1.56/27 C. 192.168.1.64/26 D. 192.168.1.64/27 Among other things, switches are used to connect three or more devices together to enable communication between hosts. Identify the other functions of switches. (Choose three) A. Segment a large LAN into many smaller segments by using full-duplex ports B. Forward, filter, or flood frames based on Medium Access Control, or MAC, addresses C. Build and maintain a routing table that matches destination IP addresses with specific ports D. Switch traffic as fast as possible, supporting different port speeds E. Operate at the Internet layer of the TCP/IP protocol suite https://www.learncisco.net/courses/icnd-1/ethernet-lans/developing-design-for-layer-2.html Which of the following switch port modes will successfully form a trunk between two switches? (Choose four) A. Dynamic desirable - dynamic auto B. Trunk - dynamic desirable C. Access - dynamic auto D. Trunk - trunk E. Dynamic auto - dynamic auto F. Trunk - access G. Trunk - dynamic auto Which DSCP Assured Forwarding value provides the worst drop and worst queue performance? A. AF41 B. AF43 C. AF11 D. AF13 If a /20 subnet was applied to a Class B address, how many subnets would you create? A. 8 B. 32 C. 16 D. 4 E. 14 https://www.learncisco.net/courses/icnd-1/lan-connections/network-addressing-scheme.html Which are valid modes for a switch port used as a VLAN trunk? (Choose three) A. transparent B. auto C. on D. desirable E. blocking F. forwarding https://www.learncisco.net/courses/icnd-2/vlans-and-spanning-tree/trunk-operations.html Robust wireless encryption is based on which of the following algorithms? A. WEP B. AES C. DES D. IPsec Packets are able to take two different paths across the network to their destination. The first path has a 10 Mbps link, a 5 Mbps link, and a 100 Mbps link. The second path uses a 2 Mbps link and a 100Mbps link. What is the cost of the path the packets will take? A. 31 B. 51 C. 20 D. 11 https://www.learncisco.net/courses/icnd-2/an-overview-of-ospf/ospf-data-overview.html Identify the functionality provided by dynamic routing protocols. (Choose two) A. Enables more efficient use of bandwidth B. Require less CPU time and RAM space C. They determine the best path to the destination networks D. Find the new best path when the current path is not available https://www.learncisco.net/courses/icnd-1/ip-routing-technologies/dynamic-routing.html You can use the Cisco IOS ”copy” command to move configurations from one component or device to another. Which of the following commands will save the recent configuration changes to the NVRAM? A. erase startup-config B. copy tftp running-config C. copy running-config tftp D. copy running-config startup-config https://www.learncisco.net/courses/icnd-1/network-environment-management/managing-devices.html Looking at the exhibit, what key:value pair option has a value that is numeric in nature? A. ”upTime”: ”45 days, 13:36:14.80”, B. ”lastUpdated”: ”2019-10-29 02:52:00”, C. ”managementIpAddress”: ”10.230.1.1”, D. ”lastUpdateTime”: 1572317520439 What can you verify on a Cisco IOS ISR with the ”show ip interface” command? (Choose five) A. The number of packets input and output on the interface B. The IP address and subnet mask of the interface C. The name or number of an ACL that is applied to the interface D. Whether the router is a DHCP relay agent E. The MAC address of the interface F. The method used to assign the IP address to the interface G. The status and protocol status of the interface If both the cost and upstream BID are tied, which BPDU value is used to break this tie? A. Upstream Port ID B. Priority C. Status D. MAC address Which option should be used with the “switchport trunk allowed vlan“ command to include specified VLANs in the existing list of allowed VLANs on a trunk link? A. add B. except C. remove D. none E. all You need to back up the Cisco IOS image of your Catalyst switch to a tftp server. Where is the Cisco IOS image stored? A. Flash B. RAM C. HTTP D. FTP E. USB F. NVRAM Regarding lightweight AP modes, which one of the following is true? A. An AP can operate in multiple modes at the same time. B. An AP only has one possible mode of operation. C. The Run mode is the default mode. D. The SE-Connect mode is used for spectrum analysis. Which of the following commands enables BPDU guard on an access port? A. spanning-tree portfast default B. spanning-tree portfast C. spanning-tree bpduguard enable D. spanning-tree portfast bpduguard default https://www.learncisco.net/courses/icnd-1/medium-size-switched-network-construction/performance-with-spanning-tree.html Of the figures shown, which depicts an accurate Clos Architecture? A. Topology A B. Topology B C. Topology C D. Topology D Which of the following behaviors are applied to a low latency queue in a Cisco router or switch? (Choose two) A. Shaping B. Policing C. Priority scheduling D. Round-robin scheduling Which of the following describes the STP protocol? A. Assumes one 802.1D spanning tree for the entire bridged network B. Provides a separate 802.1D spanning tree for each virtual LAN, or VLAN, configured C. Provides fast conversion with a single instance of STP D. Provides fast conversion with an instance of spanning tree per VLAN https://www.learncisco.net/courses/icnd-2/vlans-and-spanning-tree/stp-protocol-types.html An enterprise plans to start using a public cloud service and is considering different WAN options. The answers list four options under consideration. Which one option has the most issues if the company chooses one cloud provider but then later wants to change to use a different cloud provider instead? A. Using private WAN connections directly to the cloud provider B. Using an Internet connection without VPN C. Using an intercloud exchange D. Using an Internet connection with VPN Consider the following scenario: Host A has IP address 192.168.6.3 and MAC address 0800:0111:3333. Host B has IP address 192.168.7.3 and MAC address 0800:0222:4444. The router has IP address 192.168.7.1 and MAC address 0800:0444:1111. When Host B receives a packet from Host A, the frame contains the source and destination IP and MAC addresses. What should be the source IP address? A. 0800:0444:1111 B. 192.168.7.3 C. 192.168.6.3 D. 0800:0222:4444 https://www.learncisco.net/courses/icnd-1/lan-connections/packet-delivery-process-at-l3.html You need to create a standard IPv4 ACL entry that will deny all packets sourced from the Class C private IP address space. Which of these options is the correct ACL entry? A. access-list 10 deny 172.16.0.0 0.15.255.255 B. access-list 10 deny any C. access-list 10 deny 10.0.0.0 0.0.0.255 D. access-list 10 deny 10.0.0.0 0.255.255.255 E. access-list 10 deny 192.168.0.0 0.0.255.255 F. access-list 10 deny 192.168.0.0 0.0.0.255 G. access-list 10 deny 172.16.0.0 0.0.15.255 Which of these should be checked when troubleshooting end-to-end connectivity between IP addresses? (Choose three) A. The physical connection B. The default gateway C. The domain name resolution address D. The computer name E. The routing protocol Refer to the exhibit; in which area would R1’s Gi0/0 interface be placed? A. 5 B. 6 C. 10 D. 11 Which Cisco IOS command is used to advertise a default route into an OSPF domain regardless of whether a default static route is configured? A. default-information originate B. default-information originate always C. default-information originate permanent D. default-information originate no-check Identify the true statements about VLANs and trunking with IEEE 802.1Q. (Choose three) A. The native VLAN should be changed from the default for security B. The layer 2 header must be adjusted to keep track of VLAN origins C. All VLANs have a tag D. Inter Switch Link and IEEE 802.1 Q are trunking protocols E. Access ports carry traffic for multiple VLANs https://www.learncisco.net/courses/icnd-1/medium-size-switched-network-construction/vlans-and-trunk.html What is the default inactivity timer in minutes for the Console port on a Cisco IOS 2900 ISR? A. 20 B. 5 C. 10 D. 15 E. 3 F. 1 G. 7 Which of the following are required attributes of a REST-based API? (Choose two) A. Uses HTTP B. Objects noted as to whether they can be cached C. Classful operation D. Client/server architecture Suppose you would like to select a method to protect the privacy and integrity of wireless data. Which one of the following methods should you avoid because it has been deprecated? A. TKIP B. CCMP C. GCMP D. EAP Which command stores passwords as an SHA-256 or MD5 hash? A. service password-encryption B. service password-encryption {sha256 \| md5} C. enable password {sha256 \| md5} D. enable hash-password E. None of the above. Which statements best describe physical and logical topologies? (Choose two) A. The physical topology requires that data takes the shortest path across the network towards its destination B. The physical topology is dependent on the type of cabling that is used C. The logical topology can allow data to take a longer path across the network towards its destination D. The primary categories of logical topologies are bus, star, and mesh https://www.learncisco.net/courses/icnd-1/building-a-network/the-functions-of-networking.html Which cloud service is owned and operated by a third party and allows people from a variety of different companies to request and use its resources? A. Hybrid cloud B. Internet cloud C. Private cloud D. Public cloud Which QoS feature is typically used inbound to a network to limit the amount of traffic that is allowed to flow in? A. Traffic classification B. Traffic shaping C. Traffic limiting D. Traffic policing When comparing next-generation IPS to traditional IPS, what additional capabilities can be leveraged to more efficiently block traffic? (Choose three) A. AVC B. Signature-based filtering C. Contextual awareness D. Event impact level Using the exhibit as a reference, what is a valid key? A. ”lastUpdateTime”: 1572317520439 B. ”CSR1000V” C. ”role” D. ”platformId”: A switch’s port Gi0/1 has been correctly enabled with port security. The configuration sets the violation mode to restrict. A frame that violates the port security policy enters the interface, followed by a frame that does not. Which of the following answers correctly describe what happens in this scenario? (Choose two) A. The switch puts the interface into an err-disabled state when the first frame arrives. B. The switch generates syslog messages about the violating traffic for the first frame. C. The switch increments the violation counter for Gi0/1 by 1. D. The switch discards both the first and second frame. Which of the following route types is used when one of the router`s interfaces is attached to the network? A. Directly connected B. Default route C. Dynamic routing D. Static routing https://www.learncisco.net/courses/icnd-1/ip-routing-technologies/static-routing.html Which command could you enter to encrypt passwords? A. enable secret B. username {username} secret {password} C. service password-encryption D. All of the above E. None of the above Refer to the diagram. What is the name of the device (referenced with the arrow) that communicates with wireless clients? A. Wireless controller B. Access point C. Router D. Wireless bridge Which statements define dynamic NAT when used for private to public translations? A. Dynamic NAT only translates public addresses matching an ACL to private addresses that are defined in a NAT pool B. Dynamic NAT only translates private addresses matching an ACL to public addresses that are defined in a NAT pool C. Dynamic NAT only translates private addresses that are defined in a NAT pool to public addresses matching an ACL D. Dynamic NAT allows multiple private addresses to be translated to the same public address Which of the following is describing the Nonegotiate mode of Dynamic Trunking Protocol? A. Creates a trunk with the neighboring switch based on the DTP request B. Enables trunking on the interface C. Trunking cannot take place on the port regardless of DTP requests D. Sends a DTP communication that it wants to create a trunk with the neighboring switch E. DTP frames are prevented from being generated from the port https://www.learncisco.net/courses/icnd-2/vlans-and-spanning-tree/dynamic-trunking-protocol.html Which protocol provides encryption only? A. TLS VPN B. GRE VPN C. Connect VPN D. IPsec VPN What are the solutions to the public IPv4 addressing shortage? (Choose three) A. Subnetting B. ARP C. Use of private IPv4 addresses D. DHCP E. IPv6 F. Creating more public IPv4 addresses Given the output from a working OSPF router, as seen in the exhibit, how many neighboring routers exist? B. 1 C. 2 D. 3 E. More than 3 If you take the network 192.168.1.0/24 and create four subnets from it, what are the new subnet IDs? (Choose four) A. 192.168.1.128 B. 192.168.1.32 C. 192.168.1.96 D. 192.168.1.64 E. 192.168.1.192 F. 192.168.1.0 Which DSCP marking group was created to be backward compatible with Internet Protocol Precedence (IPP) values? A. EF B. AF C. CS D. PF Which statements describe the benefits of using external authentication for larger networks? (Choose two) A. It requires less administrative effort than local authentication B. It enables the use of Terminal Access Controller Access Control System+, or TACACS+ C. It only allows Secure Shell, or SSH, connections D. It does not require the configuration of a default gateway https://www.learncisco.net/courses/icnd-1/lan-connections/cisco-router-security.html

Our Recommended Premium CCNA Training Resources

These are the best CCNA training resources online:

Click Here to get the Cisco CCNA Gold Bootcamp, the most comprehensive and highest rated CCNA course online with a 4.8 star rating from over 30,000 public reviews. I recommend this as your primary study source to learn all the topics on the exam.

Want to take your practice tests to the next level? AlphaPrep’s purpose-built Cisco test engine has the largest question bank, adaptive questions, and advanced reporting which tells you exactly when you’re ready to pass the real exam. Click here for your free trial.

The CCNA 200-301 is for the Cisco Certified Network Associate (CCNA) Implementing and Administering Cisco Solutions exam. You can use the practice test to check your knowledge and improve your understanding in preparation for the Cisco CCNA certification exam.

The Cisco CCNA 200-301 practice exam tests include questions to test your knowledge and skills related to Cisco networking fundamentals, which helps you pass the actual exam.

The Cisco CCNA exam objectives include Cisco network fundamentals on routers, switches, IP addresses, etc., network access, IP connectivity such as static and dynamic routing protocol, IP services, network security fundamentals, and automation and programmability.

Cisco CCNA 200-301 Practice Test

Complete this form to get your score report

Our Recommended Premium CCNA Training Resources