Cisco CCNA 200-301 Practice Test

Cisco Practice Tests

Question 1 / 55 - Mode : Exam
Please choose the correct sequence of the following data encapsulation steps: 1. The layer 3 header is added to the data before being passed on the next layer. 2. A header is added to previous data and is passed to the Internet layer. 3. A trailer, usually the frame check sequence of FCS, and a header are added. 4. An application sends user data. A. 4, 3, 2, 1 B. 1, 2, 3, 4 C. 4, 2, 1, 3 D. 3, 4, 2, 1 Which aspects can you check to verify that IPv6 is configured correctly? (Choose three) A. Interfaces have the IPv6 address configured B. Correct cable is being used C. IPv6 routing is enabled on the router D. Routing protocols that are configured for IPv6 E. IOS is up to date Which cloud service model is primarily targeted toward the software development community and provides the ability to not only customize the hardware being virtualized but also offer different development tools and utilities that are commonly used for a specific environment? A. TaaS B. IaaS C. SaaS D. PaaS What is the field that is used on modern systems that allows an IP packet to be marked with a specific QoS value? A. EXP B. CoS C. DSCP D. Traffic Class You are working in a data center environment and are assigned the address range 10.188.31.0/23. You are asked to develop an IP addressing plan to allow the maximum number of subnets with as many as 30 hosts each. Which IP address range meets these requirements? A. 10.188.31.0/26 B. 10.188.31.0/25 C. 10.188.31.0/28 D. 10.188.31.0/27 E. 10.188.31.0/29 https://www.learncisco.net/courses/ccna/part-2-ip-addressing-and-subnetting-nat/variable-length-subnet-mask.html In a reflection attack, the source IP address in the attack packets is spoofed so that it contains which one of the following entities? A. The address of the attacker B. The address of the reflector C. The address of the victim D. The address of the router Which statements identify VLAN trunking behavior across IEEE 802.1Q links? (Choose two) A. By default, access ports carrytraffic for one VLAN only B. The layer 2 header must remain static to keep track of VLAN origins C. All VLANs have a tag, except the native VLAN D. The native VLAN should be left alone for security https://www.learncisco.net/courses/icnd-1/medium-size-switched-network-construction/vlans-and-trunk.html Refer to the diagram. What is the name of the device (referenced with the arrow) that communicates with wireless clients? A. Wireless controller B. Access point C. Router D. Wireless bridge Refer to the diagram. What method of authentication is being used? A. Open authentication B. CCMP C. WEP D. 802.1x What steps are involved in configuring a SPAN session? (Choose three) A. Associate a SPAN session number with the source port of VLANs B. Associate a SPAN number with the destination C. Instruct the router to copy all traffic that it sends and receives D. Verify the configuration E. Configure the destination port as a source port What is the destination MAC address of a broadcast frame? A. 00:00:0c:07:ac:01 B. ff:ff:ff:ff:ff:ff C. 43:2e:08:00:00:0c D. 00:00:0c:43:2e:08 E. 00:00:0c:ff:ff:ff What is required for a directly connected route to be added to the routing table? (Choose two) A. The network command must be issued under the routing process B. BGP must be running on the router C. A local route must be manually created D. The IP route command must be configured in global configuration mode E. Configure an IP address on the interface F. The interface Status must be up and the Protocol must be up Which command is used to set your Cisco IOS device as an authoritative time source that will be used as the trusted time source? A. ntp master B. ntp server C. ntp client D. ntp peer What is the purpose of the “service password-encryption“ command? A. It encrypts all passwords on your router. B. It encrypts the line console password only. C. It encrypts the vty password only. D. It is not a valid cisco command Which of the following statements describe the network shown in the graphic? (Choose two) A. There are two broadcast domains in the network. B. There are four broadcast domains in the network. C. There are six broadcast domains in the network. D. There are four collision domains in the network. E. There are five collision domains in the network. F. There are seven collision domains in the network. The Wi-Fi Alliance offers which of the following certifications for wireless devices that correctly implement security standards? A. WEP B. WPA2 C. 802.11 D. AES Host A and Host B sit in two different subnets. The path between the subnets of these two hosts runs through three different Layer 3 forwarding devices (routers and Layer 3 switches). A network engineer uses the APIC-EM Path Trace ACL Analysis tool to analyze the path used for Host A to send packets to Host B. Which part of the function is done specifically by the ACL Analysis or ACL Trace part of the tool? A. Discovery of the topology that exists between the two hosts B. Analysis of the Layer 3 forwarding decisions in the path from Host A to B C. Analysis of the Layer 2 forwarding decisions in the path from Host A to B D. Analysis of the impact of ACLs on the packets that would flow from Host A to B Which of the following controllers (if any) from Cisco uses a mostly centralized control plane model? A. Cisco Open SDN Controller B. Cisco Application Policy Infrastructure Controller (APIC) C. Cisco APIC Enterprise Module (APIC-EM) D. None of these controllers uses a mostly centralized control plane. Which of the following identifications can be used with Extended ACL? (Choose two) A. Can use 88 as identification B. Can use 2467 with as identification C. Can use filter2 as identification D. Can use 1399 as identification E. Can use filter4 as identification F. Can use 113 as identification https://www.learncisco.net/courses/icnd-1/acls-and-nat/type-of-acls.html Refer to the exhibit; in which area would R1’s Gi0/0 interface be placed? A. 5 B. 6 C. 10 D. 11 Which of the following is required when configuring port security with sticky learning? A. Setting the maximum number of allowed MAC addresses on the interface with the switchport port-security maximum interface subcommand B. Enabling port security with the switchport port-security interface subcommand C. Defining the specific allowed MAC addresses using the switchport port-security mac-address interface subcommand D. All the other answers list required commands Which command can be used from a PC to verify the connectivity between hosts that connect through a switch in the same LAN? A. ping address B. tracert address C. traceroute address D. arp address https://www.learncisco.net/courses/icnd-1/medium-size-switched-network-construction/troubleshooting-switched-network.html A _________ is a virtual instance of a traditional networking device that a consumer can use in a cloud. A. virtual network function B. virtual network appliance C. network virtualized element D. network cloud device An enterprise plans to start using a public cloud service, and is considering different WAN options. The answers list four options under consideration. Which one option has the most issues if the company chooses one cloud provider but then later wants to change to use a different cloud provider instead? A. Using private WAN connections directly to the cloud provider B. Using an Internet connection without VPN C. Using an intercloud exchange D. Using an Internet connection with VPN Which of the following are available methods of classifying packets in DiffServ on Cisco routers? (Choose three) A. Matching the IP DSCP field B. Matching the 802.1p CoS field C. Matching fields with an extended IP ACL D. Matching the SNMP Location variable You have taken the 172.16.0.0/16 network and subnetted it to a /23. The end result of this created 128 subnets. The first four subnet IDs are 172.16.0.0/23, 172.16.2.0/23, 172.16.4.0/23, and 172.16.6.0/23. What are the fifth and sixth subnet IDs? (Choose two) A. 172.16.10.0/23 B. 172.16.9.0/23 C. 172.16.7.0/23 D. 172.16.8.0/23 E. 172.16.11.0/23 When comparing controller-based networks and traditional networks what are some perceived benefits from a controller-based perspective? (Choose two) A. New operational models that allow the entire network to be instantiated and not just a single device at a time B. The use of automation through APIs that enable data-driven models C. New operational models that allow for a single device to be instantiated with the entire network in mind D. The use of legacy approaches in the network to increase efficiency and productivity What type of banner should you configure when you want the message to be displayed anytime a user is required to enter usernames and passwords for management sessions? A. incoming B. motd C. login D. EXEC Four OSPF routers connect to the same LAN. In a new election after all routers have been rebooted, which router wins the DR election? A. R4, router-id 4.4.4.4, priority 1 B. R3, router-id 3.3.3.3, priority 2 C. R1, router-id 1.1.1.1, priority 4 D. R2, router-id 2.2.2.2, priority 3 During a maintenance window, you make some changes to R2. You document these changes in your configuration management system. Later that night, you are called in to fix an issue that requires you to make additional changes to R2. The next morning your co-worker addresses another issue but this time on R1. All of these changes are documented properly but neither you or nor your coworker discuss the changes. These changes stay implemented for months. What is this best described as? A. Version control B. Centralized configuration C. Configuration drift D. Configuration monitoring What versions of Wi-Fi Protected Access (WPA) were defined after the IEEE ratified the IEEE 802.11i security standard? (Choose two) A. WPA B. WPA2 C. WPA3 D. WPA0 What is used to determine the MAC address of a known IPv6 address? A. ARPv6 B. DHCP C. ARP D. DHCPv6 E. Router discovery F. Neighbor discovery An engineer connects to Router R1 and issues a show ip ospf neighbor command. The status of neighbor 2.2.2.2 lists FULL/BDR. What does the BDR mean? A. R1 is an Area Border Router. B. R1 is a backup designated router. C. Router 2.2.2.2 is an Area Border Router. D. Router 2.2.2.2 is a backup designated router. Which IPv6 address is the equivalent of the IPv4 interface loopback address 127.0.0.1? A. ::1 B. :: C. 2000::/3 D. 0::/10 https://www.learncisco.net/courses/icnd-2/troubleshooting-basic-connectivity/ipv6-unicast-addresses.html Which command should you use on a router to verify the presence of a default gateway? A. show ip route B. tracert C. traceroute D. route print https://www.learncisco.net/courses/icnd-2/troubleshooting-basic-connectivity/identification-of-the-path.html You receive a notification that there is an issue in one of your switched networks. After reviewing the logs you noticed that a switch has rebooted; however, there is no network connectivity to the resources attached to that switch anymore. You connect to the switch over the management network and notice that there is the following message: Would you like to enter the initial configuration dialog? [yes/no]: What is the reason for receiving this message? A. This is a normal message that appears each time the device boots and should be disabled B. There is no configuration in FLASH C. There is no start-up configuration in NVRAM D. There is no configuration in RAM Which end-to-end connectivity troubleshooting tool will you use to test the IP connectivity between two hosts? A. Ping B. Telnet C. Address Resolution Protocol, or ARP D. Traceroute https://www.learncisco.net/courses/icnd-2/troubleshooting-basic-connectivity/troubleshooting-connectivity.html You are troubleshooting the components involved in IPv6 end-to-end connectivity on a Mac computer. Please select the command you will use to check whether an ACL is attached to an interface. A. show ipv6 interface B. show ipv6 route C. show ipv6 access-list D. ping E. ipconfig F. ifconfig https://www.learncisco.net/courses/icnd-2/troubleshooting-basic-connectivity/troubleshooting-ipv6-connectivity.html What are the considerations when using Cisco PVST+? (Choose two) A. You can manipulate spanning-tree topologies on a VLAN-by-VLAN basis B. There is only one spanning-tree instance for the entire switched network C. It does not allow load sharing or balancing D. It allows optimal load sharing Which of the following route types is used when the route is populated by routing information exchanges? A. Directly connected B. Default route C. Dynamic routing D. Static routing https://www.learncisco.net/courses/icnd-1/ip-routing-technologies/dynamic-routing.html You can use output filters in combination with any show command. Which of the following leaves out all output lines that match the filtering expression? A. include B. exclude C. begin D. section https://www.learncisco.net/courses/icnd-1/lan-connections/starting-a-router.html Which of the following are required attributes of a REST-based API? (Choose two) A. Uses HTTP B. Objects noted as to whether they can be cached C. Classful operation D. Client/server architecture What is the default security violation mode for port security on a Cisco 2960 Catalyst switch? A. Disable B. Shutdown C. Protect D. None E. Restrict F. Err-disable Which command displays information about security options configured on an interface? A. show port-security interface [interface-id] B. show port-security [interface-id] C. show port-security[address] D. show security [interface-id] Which of the following QoS marking fields could remain with a packet while being sent through four different routers, over different LAN and WAN links? (Choose two) A. CoS B. IPP C. DSCP D. MPLS EXP Some IOS commands store passwords as clear text, but you can then encrypt the passwords with the service password-encryption global command. By comparison, other commands store a computed hash of the password, rather than storing the password. Comparing the two options, which one answer is the most accurate about why one method is better than the other? A. Using hashes is preferred because encrypted IOS passwords can be easily decrypted. B. Using hashes is preferred because of the large CPU effort required for encryption. C. Using encryption is preferred because it provides stronger password protection. D. Using encryption is preferred because of the large CPU effort required for hashes. Which of the following describes the Rapid PVST+ protocol? A. Assumes one 802.1D spanning tree for the entire bridged network B. Provides a separate 802.1D spanning tree for each virtual LAN, or VLAN, configured C. Provides fast conversion with a single instance of STP D. Provides fast conversion with an instance of spanning tree per VLAN https://www.learncisco.net/courses/icnd-2/vlans-and-spanning-tree/stp-protocol-types.html When establishing a translation between an inside local and inside global address with Port Address Translation, what keyword must be used with the ”ip nat inside source” command to enable PAT? A. overload B. pool C. permit D. inside https://www.learncisco.net/courses/icnd-1/acls-and-nat/address-translation.html Which of these are QoS requirements when designing a Cisco TelePresence video network? (Choose two) A. One-way delay < 200 ms B. Round-trip delay < 200 ms C. Loss < 5% D. Loss < 0.05% E. Jitter < 100 ms F. Jitter < 50 ms What command is used to verify ARP cache entries? A. show arp B. arp C. arp timeout D. show arp traffic You are implementing a VLSM network. You are using the Class B network of 172.16.0.0/16 and need to create 256 networks from this. The fifth network will then be subnetted into /30 networks. What is the subnet ID of the fourth /30 network? A. 172.16.4.12/30 B. 172.16.4.4/30 C. 172.16.4.6/30 D. 172.16.4.8/30 E. 172.16.4.14/30 F. 172.16.4.10/30 R1, R2, R3, and R4 have their Fast Ethernet 0/0 interfaces attached to the same VLAN. A network engineer has typed a configuration for each router by using a word processor. He will later copy and paste the configuration into the routers. Examine the following exhibit, which lists configuration for the four routers, as typed by the network engineer. Assuming that all four routers can ping each other’s LAN IP addresses after the configuration has been applied, choose the routers that will be able to form a neighbor relationship with the other routers on the LAN. (You can assume that, if not shown in the exhibit, all other related parameters are still set to their defaults.) (Choose two) A. R1 B. R2 C. R3 D. R4 E. None of the routers will exchange routing information. In an Ethernet network, under what two scenarios can devices transmit? (Choose two) A. when they receive a special token B. when there is a carrier C. when they detect no other devices are sending D. when the medium is idle E. when the server grants access https://www.learncisco.net/courses/icnd-1/building-a-network/ethernet-protocol.html Three switches are connected to one another via trunk ports. Assuming the default switch configuration, which switch is elected as the root bridge for the spanning-tree instance of VLAN 1? A. the switch with the highest MAC address B. the switch with the lowest MAC address C. the switch with the highest IP address D. the switch with the lowest IP address https://www.learncisco.net/courses/icnd-2/vlans-and-spanning-tree/spanning-tree-operations.html Refer to the exhibit. Switch port FastEthernet 0/24 on ALSwitch1 will be used to create an IEEE 802.1Q-compliant trunk to another switch. Based on the output shown, what is the reason the trunk does not form, even though the proper cabling has been attached? A. VLANs have not been created yet. B. An IP address must be configured for the port. C. The port is currently configured for access mode. D. The correct encapsulation type has not been configured. E. The "no shutdown" command has not been entered for the port.

Our Recommended Premium CCNA Training Resources

These are the best CCNA training resources online:

Click Here to get the Cisco CCNA Gold Bootcamp, the most comprehensive and highest rated CCNA course online with a 4.8 star rating from over 30,000 public reviews. I recommend this as your primary study source to learn all the topics on the exam.

Want to take your practice tests to the next level? AlphaPrep’s purpose-built Cisco test engine has the largest question bank, adaptive questions, and advanced reporting which tells you exactly when you’re ready to pass the real exam. Click here for your free trial.

The CCNA 200-301 is for the Cisco Certified Network Associate (CCNA) Implementing and Administering Cisco Solutions exam. You can use the practice test to check your knowledge and improve your understanding in preparation for the Cisco CCNA certification exam.

The Cisco CCNA 200-301 practice exam tests include questions to test your knowledge and skills related to Cisco networking fundamentals, which helps you pass the actual exam.

The Cisco CCNA exam objectives include Cisco network fundamentals on routers, switches, IP addresses, etc., network access, IP connectivity such as static and dynamic routing protocol, IP services, network security fundamentals, and automation and programmability.

Cisco CCNA 200-301 Practice Test

Complete this form to get your score report

Our Recommended Premium CCNA Training Resources