Cisco CCNA 200-301 Practice Test

Cisco Practice Tests

Question 1 / 55 - Mode : Exam
Refer to the diagram. What is the name of the device (referenced with the arrow) that communicates with wireless clients? A. Wireless controller B. Access point C. Router D. Wireless bridge In what security zone are the public web servers located? A. DMZ B. Inside C. Outside D. Campus Which DSCP marking group was created to be backward compatible with Internet Protocol Precedence (IPP) values? A. EF B. AF C. CS D. PF Refer to the exhibit. Which switch provides the spanning-tree designated port role for the network segment that services the printers? A. Switch1 B. Switch2 C. Switch3 D. Switch4 In the virtualization world, the ___________ manages and allocates the host hardware for each VM. A. Host controller B. Hyperthreader C. Hypervisor D. Host service In a split-MAC architecture, real-time functions such as encryption are handled in which of the following network entities? A. An access layer switch B. A distribution layer switch C. A wireless LAN controller D. A lightweight AP Identify the fields in an IPv4 header. (Choose three) A. Host component B. Time to Live C. Source address D. Destination address E. Network address https://www.learncisco.net/courses/icnd-1/building-a-network/tcpip-internet-layer.html Which QoS feature is typically used inbound to a network to limit the amount of traffic that is allowed to flow in? A. Traffic classification B. Traffic shaping C. Traffic limiting D. Traffic policing What type of variable is being shown? Routers = [R1,R2,R3] A. List B. Dictionary C. Simple D. Unsigned integers Which command will assign a static global IPv6 address to an interface? A. ipv6 address 2001::12:1 B. ipv6 address fe80::12:1 C. ipv6 address 2001::12:1/64 global D. ipv6 address fe80::12:1 global E. ipv6 address fe80::12:1/64 F. ipv6 address 2001::12:1/64 What is the name of the protocol that has been developed by the ONF that is used to communicate between an SDN controller and the network devices it controls? A. OpFlex B. OpenSDN C. SbControl D. OpenFlow Which IOS command always displays OSPF hello timer settings? A. show ip protocols B. show ip route C. show ip ospf interface D. show ip ospf neighbor E. debug ip ospf events Which command can you use to encrypt all current and future plain-text passwords that are stored in the running configuration? A. login B. service password-encryption C. enable secret D. username username password password E. crypto key generate rsa modulus 1024 F. username username secret password Which command is used to create a standard numbered IPv4 ACL? A. access-list numbered B. ip access-list C. numbered access-list D. access-list ip E. access-list Which of the following dynamic routing protocols are Distance Vector routing protocols? (Choose two) A. IS-IS B. EIGRP C. OSPF D. BGP E. RIP Which of the following reserved IPv4 addresses typically uses the IP address 127.0.0.1? A. Local broadcast address B. Loopback address C. Directed broadcast address D. Network address E. All zeros address https://www.learncisco.net/courses/ccna/part-2-ip-addressing-and-subnetting-nat/network-addressing.html What are three features of the IPv6 protocol? (Choose three) A. optional IPsec B. autoconfiguration C. no broadcasts D. complicated header E. plug-and-play F. checksums https://www.learncisco.net/courses/ccna/part-8-internet-protocol-version-6/addressing.html Which DSCP Assured Forwarding value provides the worst drop and worst queue performance? A. AF41 B. AF43 C. AF11 D. AF13 An enterprise plans to start using a public cloud service, and is considering different WAN options. The answers list four options under consideration. Which options provide good security by keeping the data private while also providing good QoS services? (Choose two) A. Using private WAN connections directly to the cloud provider B. Using an Internet connection without VPN C. Using an intercloud exchange D. Using an Internet connection with VPN You are working in a data center environment and are assigned the address range 10.188.31.0/23. You are asked to develop an IP addressing plan to allow the maximum number of subnets with as many as 30 hosts each. Which IP address range meets these requirements? A. 10.188.31.0/26 B. 10.188.31.0/25 C. 10.188.31.0/28 D. 10.188.31.0/27 E. 10.188.31.0/29 https://www.learncisco.net/courses/ccna/part-2-ip-addressing-and-subnetting-nat/variable-length-subnet-mask.html A Cisco Catalyst switch connects to what should be individual user PCs. Each port has the same port security configuration, configured as follows: interface range gigabitethernet 0/1 - 24 switchport mode access switchport port-security switchport port-security mac-address sticky Which of the following answers describe the result of the port security configuration created with these commands? (Choose two) A. Prevents unknown devices with unknown MAC addresses from sending data through the switch ports. B. If a user connects a switch to the cable, prevents multiple devices from sending data through the port. C. Will allow any one device to connect to each port, and will save that device’s MAC address into the startup-config D. Will allow any one device to connect to each port, but will not save that device’s MAC address into the startup-config Using the exhibit as a reference, how many JSON objects are there? A. 11 B. 1 C. 2 D. 12 From the following options, what are the required REST API attributes? (Choose two) A. JSON-formatted data B. Unlayered systems C. Layered systems D. Client-server architecture Which of the following statements are true regarding the processing of ACLs that have been applied to router interfaces? (Choose two) A. Inbound ACLs will be processed before the routing table lookup occurs B. Inbound ACLs will be processed after the routing table lookup has occurred C. Outbound ACLs will be processed after the routing table lookup has occurred D. Outbound ACLs will be processed before the routing table lookup occurs Which cloud service is specific to one company that owns both the tools/infrastructure that creates the cloud and the people that use the services? A. Hybrid cloud B. Public cloud C. Private cloud D. Internal cloud Which command can be used from a PC to verify the connectivity between hosts that connect through a switch in the same LAN? A. ping address B. tracert address C. traceroute address D. arp address https://www.learncisco.net/courses/icnd-1/medium-size-switched-network-construction/troubleshooting-switched-network.html Which command will assign a global IPv6 address with an autoconfigured interface portion to a router interface? A. ipv6 address 2001:db8:1:1::0001/64 eui-64 B. ipv6 address 2001:db8:1:1::0001/64 auto-configure C. ipv6 address 2001:db8:1:1::/64 auto-configure D. ipv6 address 2001:db8:1:1::/64 eui-64 E. ipv6 address 2001:db8:1:1::/64 Which of the following behaviors is applied to a low latency queue in a Cisco router or switch? (Choose two) A. Congestion management B. Shaping C. Policing D. Priority scheduling E. Round robin scheduling Select the link state dynamic routing protocols. (Choose two) A. RIP B. EIGRP C. IS-IS D. OSPF https://www.learncisco.net/courses/icnd-1/ip-routing-technologies/dynamic-routing.html R1, R2, R3, and R4 have their Fast Ethernet 0/0 interfaces attached to the same VLAN. A network engineer has typed a configuration for each router by using a word processor. He will later copy and paste the configuration into the routers. Examine the following exhibit, which lists configuration for the four routers, as typed by the network engineer. Assuming that all four routers can ping each other’s LAN IP addresses after the configuration has been applied, choose the routers that will be able to form a neighbor relationship with the other routers on the LAN. (You can assume that, if not shown in the exhibit, all other related parameters are still set to their defaults.) (Choose two) A. R1 B. R2 C. R3 D. R4 E. None of the routers will exchange routing information. Which of the following identifications can be used with Named ACL? (Choose two) A. Can use 88 as identification B. Can use 2467 with as identification C. Can use filter2 as identification D. Can use 1399 as identification E. Can use filter4 as identification https://www.learncisco.net/courses/icnd-1/acls-and-nat/type-of-acls.html You are setting up a Cisco IOS router as a DHCP server. Which command is used to identify the IPv4 addresses that will be in the DHCP pool? A. network B. dns-server C. default-router D. ip dhcp excluded-address E. lease F. ip dhcp pool G. domain-name You are configuring port security on a Catalyst IOS switch. You need to choose a violation mode that will deny frames that are in violation of the port security settings while still allowing frames that are not in violation. In addition, syslog messages need to be generated and the port security violation counter must increase each time a violation occurs. Which port security violation mode should you choose? A. Err-disable B. Protect C. Shutdown D. Disable E. Restrict When using NAT to translate private IPv4 addresses to public IPv4 addresses, what term is used to identify the private IPv4 address? A. Inside local B. Outside local C. Outside global D. Inside global Imagine you configured OSPFv2 in a small lab network. Which of the following answers list a condition that could keep the routers in your lab from learning all the routes to all the IPv4 routes in your small lab network? (Choose two) A. An ACL could be blocking router advertisements. B. Two neighboring routers that connect to the same link have been configured with the same OSPF area and with the same IPv4 subnet mask. C. Any physical layer problem that would prevent two neighboring routers from being able to ping each others IPv4 addresses in the subnet that exists between the two routers. D. Two neighboring routers that connect to the same link have been configured with the same OSPF process ID on the router ospf command. Which port state is introduced by Rapid-PVST? A. learning B. listening C. discarding D. forwarding https://www.learncisco.net/courses/icnd-2/vlans-and-spanning-tree/stp-protocol-types.html What will occur automatically on a Cisco IOS router when you configure the interface to obtain an IPv4 address via DHCP and the DHCP server hands out IP address, subnet mask, and default-gateway information? A. The router will become a DHCP server for other devices B. The router creates an ACL to filter all traffic inbound from the Internet C. A static default route with a next-hop IP of the ISP will be created in the routing table D. The router will become a DHCP relay-agent E. A static route to the next-hop IP of the ISP will be created in the routing table Which of the following is describing the Trunk mode (\'switchport mode trunk\') of Dynamic Trunking Protocol? A. Creates a trunk with the neighboring switch based on the DTP request B. Enables trunking on the interface C. Trunking cannot take place on the port regardless of DTP requests D. Sends a DTP communication that it wants to create a trunk with the neighboring switch E. DTP frames are prevented from being generated from the port https://www.learncisco.net/courses/icnd-2/vlans-and-spanning-tree/dynamic-trunking-protocol.html What is the administrative distance of RIPv2? A. 110 C. 90 D. 100 E. 1 F. 120 G. 5 What is the name of the firewall feature that, when used, can maintain a historical database of each connection through a device: Where it was sourced, destined, and which protocol and protocol port it was using? A. Stateless Inspection B. Stateful Inspection C. Network Protocol Analysis D. Protocol State Analysis Suppose two APs are located near each other. Which channel use strategy will result in nonoverlapping channels for Wi-Fi use? (Choose two) A. Use 2.4-GHz channel 1 on AP-A and channel 2 on AP-B. B. Use 2.4-GHz channel 1 on AP-A and 5-GHz channel 48 on AP-B. C. Use 5-GHz channel 36 on AP-A and channel 40 on AP-B. D. Use 5-GHz channel 36 on AP-A and channel 37 on AP-B. An interface on your Catalyst switch is configured with BPDU Guard. The interface has received numerous BPDUs and is now listed as being down/down. You plan on eliminating the reason why the BPDUs were received on the port. In addition, you want the port to automatically recover from the down/down state after 30 seconds. Which feature can you enable to ensure that the port automatically recovers? A. IPSLA B. Root guard C. Loop guard D. UDLD E. Errdisable recovery What does PAT use to keep each translation unique? A. A protocol number B. A combination of a port number and protocol number C. An IP address D. A port number E. A combination of an IP address and a port number F. A combination of an IP address and a protocol number What is the purpose of InterVLAN routing? A. To increase the scalability of a VLAN B. To transport packets from one VLAN to another VLAN C. To convert packets from Layer 2 to Layer 3 D. To transport packets within the same VLAN E. To increase the security of a VLAN What is the purpose of the “service password-encryption“ command? A. It encrypts all passwords on your router. B. It encrypts the line console password only. C. It encrypts the vty password only. D. It is not a valid cisco command What can VLANs be used for? (Choose two) A. To maximize device resources B. To segment a physical switch into logical broadcast domains C. To prevent specific protocols from entering your network D. To eliminate the need for routers What is the name of the protocol that is used by IEEE 802.1x devices to communicate with the authenticator and authentication server? A. EAP B. EAPoL C. RADIUS D. TACACS+ Review the topology diagram. Network 10.123.0.0/24 is the backbone area. Network 10.12.0.0/24 is area 1, and network 10.34.0.0/29 is in area 2. Which of the following are true? (Choose three) A. R1 is a backbone router. B. R1 is an ABR. C. R1 is an internal router. D. R3 would see the OSPF network of 10.12.0.0/24 as an intra-area route. E. R1 and R3 would have the same LSA information about the backbone area. You need to configure an IP address on your serial interface. Which command should you use from privileged EXEC mode to access the appropriate configuration mode and set the IP address? A. ip default-gateway B. ip address ip-address subnet-mask C. interface type number D. configure terminal https://www.learncisco.net/courses/icnd-1/lan-connections/configuring-a-router.html Host A and Host B sit in two different subnets. The path between the subnets of these two hosts runs through three different Layer 3 forwarding devices (routers and Layer 3 switches). A network engineer uses the APIC-EM Path Trace ACL Analysis tool to analyze the path used for Host A to send packets to Host B. Which part of the function is done specifically by the ACL Analysis or ACL Trace part of the tool? A. Discovery of the topology that exists between the two hosts B. Analysis of the Layer 3 forwarding decisions in the path from Host A to B C. Analysis of the Layer 2 forwarding decisions in the path from Host A to B D. Analysis of the impact of ACLs on the packets that would flow from Host A to B What is the multicast address for hello packets by default on OSPFv3? A. 224.0.0.6 B. FF02::A C. FF02::5 D. 224.0.0.5 Which statements describe the benefits of using external authentication for larger networks? (Choose two) A. It requires less administrative effort than local authentication B. It enables the use of Terminal Access Controller Access Control System+, or TACACS+ C. It only allows Secure Shell, or SSH, connections D. It does not require the configuration of a default gateway https://www.learncisco.net/courses/icnd-1/lan-connections/cisco-router-security.html Which of the following identifications can be used with Standard Numbered ACL? (Choose two) A. Can use 88 as identification B. Can use 2467 with as identification C. Can use filter2 as identification D. Can use 1399 as identification E. Can use filter4 as identification https://www.learncisco.net/courses/icnd-1/acls-and-nat/type-of-acls.html You are creating a number IPv4 extended ACL. What is the valid number range you can use? A. 1100-1199 B. 100-199 C. 200-299 D. 1-99 E. 700-799 The show port-security interface f0/1 command lists a port status of Secure-shutdown. Which of the following answer must be true about this interface at this time? A. The show interface status command lists the interface status as connected. B. The show interface status command lists the interface status as err-disabled. C. The show port-security interface command could list a mode of shutdown or restrict, but not protect. D. The show port-security interface command could list a violation counter value of 10.

Our Recommended Premium CCNA Training Resources

These are the best CCNA training resources online:

Click Here to get the Cisco CCNA Gold Bootcamp, the most comprehensive and highest rated CCNA course online with a 4.8 star rating from over 30,000 public reviews. I recommend this as your primary study source to learn all the topics on the exam.

Want to take your practice tests to the next level? AlphaPrep’s purpose-built Cisco test engine has the largest question bank, adaptive questions, and advanced reporting which tells you exactly when you’re ready to pass the real exam. Click here for your free trial.

The CCNA 200-301 is for the Cisco Certified Network Associate (CCNA) Implementing and Administering Cisco Solutions exam. You can use the practice test to check your knowledge and improve your understanding in preparation for the Cisco CCNA certification exam.

The Cisco CCNA 200-301 practice exam tests include questions to test your knowledge and skills related to Cisco networking fundamentals, which helps you pass the actual exam.

The Cisco CCNA exam objectives include Cisco network fundamentals on routers, switches, IP addresses, etc., network access, IP connectivity such as static and dynamic routing protocol, IP services, network security fundamentals, and automation and programmability.

Cisco CCNA 200-301 Practice Test

Complete this form to get your score report

Our Recommended Premium CCNA Training Resources