Cisco CCNA 200-301 Practice Test

Cisco Practice Tests

Question 1 / 55 - Mode : Exam
You are implementing a VLSM network. You are using the Class B network of 172.16.0.0/16 and need to create 256 networks from this. The fifth network will then be subnetted into /30 networks. What is the subnet ID of the fourth /30 network? A. 172.16.4.12/30 B. 172.16.4.4/30 C. 172.16.4.6/30 D. 172.16.4.8/30 E. 172.16.4.14/30 F. 172.16.4.10/30 Which cloud service is owned and operated by a third party and allows people from a variety of different companies to request and use its resources? A. Hybrid cloud B. Internet cloud C. Private cloud D. Public cloud What is the name of the Cisco product that offers a number of rack-mountable server configurations intended to be used in data centers? A. ASA B. KVM C. CRC D. UCS Which address and wildcard mask combination will match all IPv4 addresses in the networks 192.168.0.0/24 through 192.168.63.0/24? A. 192.168.0.0 0.0.31.255 B. 192.168.0.0 0.0.3.255 C. 192.168.0.0 0.0.15.255 D. 192.168.0.0 0.0.7.255 E. 192.168.0.0 0.0.127.255 F. 192.168.0.0 0.0.1.255 G. 192.168.0.0 0.0.63.255 What is the name of the protocol that has been developed by the ONF that is used to communicate between an SDN controller and the network devices it controls? A. OpFlex B. OpenSDN C. SbControl D. OpenFlow Which of the following commands will display the general status of the EtherChannel interface? A. show etherchannel summary B. show interface port-channel C. show etherchannel port-channel https://www.learncisco.net/courses/icnd-2/etherchannel-and-l3-redundancy/configuring-etherchannel.html Imagine you configured OSPFv2 in a small lab network. Which of the following answers list a condition that could keep the routers in your lab from learning all the routes to all the IPv4 routes in your small lab network? (Choose two) A. An ACL could be blocking router advertisements. B. Two neighboring routers that connect to the same link have been configured with the same OSPF area and with the same IPv4 subnet mask. C. Any physical layer problem that would prevent two neighboring routers from being able to ping each others IPv4 addresses in the subnet that exists between the two routers. D. Two neighboring routers that connect to the same link have been configured with the same OSPF process ID on the router ospf command. Which port state is introduced by Rapid-PVST? A. learning B. listening C. discarding D. forwarding https://www.learncisco.net/courses/icnd-2/vlans-and-spanning-tree/stp-protocol-types.html Robust wireless encryption is based on which of the following algorithms? A. WEP B. AES C. DES D. IPsec How should be configured a switch so that it could be accessed remotely? A. Assign a password and privilege level B. Apply the access control list, or ACL, to the virtual type terminal, or vty, lines C. Configure a gateway for the switch D. Generate a certificate https://www.learncisco.net/courses/icnd-1/ethernet-lans/starting-a-switch.html A user is experiencing a loss of end-to-end connectivity in an IPv4 network. You have verified that the name resolution entry is correct. Now you want to check whether any IP ACLs are set on the interface. Which command should you use to do so? A. show ip access-list B. show traceroute C. show ip route D. show ip interfaces https://www.learncisco.net/courses/icnd-2/troubleshooting-basic-connectivity/acl-issues.html You want to disable the negotiation of trunking for all FastEthernet ports. Which commands are required to do this? (Choose two) A. interface range FastEthernet 0/1-24 B. show vlan brief C. switchport access vlan 2 D. switchport mode access In a network that uses OSPF, you need to configure a default route to 203.0.113.1 on one router that will then be advertised to the other routers. What command should be used first? A. ip route 203.0.113.1 0.0.0.0 203.0.113.1 B. ip route 0.0.0.0 0.0.0.0 203.0.113.1 C. default ip route 0.0.0.0 0.0.0.0 203.0.113.1 D. ip route 203.0.113.1 0.0.0.0 0.0.0.0 Which of the following are required attributes of a REST-based API? (Choose two) A. Uses HTTP B. Objects noted as to whether they can be cached C. Classful operation D. Client/server architecture Which of the following layer 2 WAN protocols is the most scalable transport technology ever developed? A. HDLC B. Ethernet C. Frame Relay D. ATM E. PPP https://www.learncisco.net/courses/icnd-2/wan-technologies/serial-encapsulation.html Which troubleshooting steps are used when a trunk is not established? (Choose two) A. Use the [show interfaces trunk] command to check if a trunk has been established between switches B. Use the [show interfaces trunk] command to see if the VLAN membership is assigned correctly C. Use the [show interfaces trunk] command to check whether the local and peer native virtual LANs, or VLANs, match D. Use the [show interfaces trunk] command to verify which Media Access Control, or MAC, addresses were learned on the interface https://www.learncisco.net/courses/icnd-1/medium-size-switched-network-construction/troubleshooting-switched-network.html What is the default security violation mode for port security on a Cisco 2960 Catalyst switch? A. Disable B. Shutdown C. Protect D. None E. Restrict F. Err-disable Wired Ethernet and Wi-Fi are based on which two IEEE standards, respectively? A. 802.1, 802.3 B. 802.1, 802.3 C. 802.3, 802.11 D. 802.11, 802.3 Which option can you choose for saving money while securing your WAN connections? A. Enterprise Managed VPN B. Service Provider VPN C. SSL VPN D. Access Control VPN You receive a notification that there is an issue in one of your switched networks. After reviewing the logs you noticed that a switch has rebooted; however, there is no network connectivity to the resources attached to that switch anymore. You connect to the switch over the management network and notice that there is the following message: Would you like to enter the initial configuration dialog? [yes/no]: What is the reason for receiving this message? A. This is a normal message that appears each time the device boots and should be disabled B. There is no configuration in FLASH C. There is no start-up configuration in NVRAM D. There is no configuration in RAM Which QoS feature is typically used inbound to a network to limit the amount of traffic that is allowed to flow in? A. Traffic classification B. Traffic shaping C. Traffic limiting D. Traffic policing In what security zone are the public web servers located? A. DMZ B. Inside C. Outside D. Campus From the following options, what are the required REST API attributes? (Choose two) A. JSON-formatted data B. Unlayered systems C. Layered systems D. Client-server architecture Refer to the exhibit. All switch ports are assigned to the correct VLANs, but none of the hosts connected to SwitchA can communicate with hosts in the same VLAN connected to SwitchB. Based on the output shown, what is the most likely problem? A. The access link needs to be configured in multiple VLANs. B. The link between the switches is configured in the wrong VLAN. C. The link between the switches needs to be configured as a trunk. D. VTP is not configured to carry VLAN information between the switches. E. Switch IP addresses must be configured in order for traffic to be forwarded between the switches. Which statements reflect the operation of OSPF neighbor states? (Choose two) A. The master and slave routers exchange one or more database description package, or DBD, packets, putting the routers in the full state B. When routers start sending link-state requests, or LSRs, they are in the loading state C. In the exchange state, the designated router, or DR, and backup designated router, or BDR, establish adjacencies with each router in the network D. When all link-state requests, or LSRs, have been satisfied for a given router, the adjacent routers are considered synchronized and in the full state https://www.learncisco.net/courses/icnd-2/an-overview-of-ospf/link-state-databases.html The show port-security interface f0/1 command lists a port status of Secure-shutdown. Which of the following answer must be true about this interface at this time? A. The show interface status command lists the interface status as connected. B. The show interface status command lists the interface status as err-disabled. C. The show port-security interface command could list a mode of shutdown or restrict, but not protect. D. The show port-security interface command could list a violation counter value of 10. In a reflection attack, the source IP address in the attack packets is spoofed so that it contains which one of the following entities? A. The address of the attacker B. The address of the reflector C. The address of the victim D. The address of the router What steps are involved in configuring IPv4 extended access lists? (Choose three) A. Create an extended named ACL B. Apply the ACL globally to the router C. Apply the ACL to an interface D. Specify the conditions to permit or deny packets E. Ensure that the ACL ends with a Deny ALL statement Which statement about VLAN operation on Cisco Catalyst switches is true? A. When a packet is received from an 802.1Q trunk, the VLAN ID can be determined from the source MAC address and the MAC address table. B. Unknown unicast frames are retransmitted only to the ports that belong to the same VLAN. C. Broadcast and multicast frames are retransmitted to ports that are configured on different VLAN. D. Ports between switches should be configured in access mode so that VLANs can span across the ports. https://www.learncisco.net/courses/icnd-1/ethernet-lans/developing-design-for-layer-2.html What is the result of issuing the command “no service password-encryption“ on a Cisco IOS router? A. All future passwords will be stored as plain text in the running configuration B. All current encrypted passwords and future passwords will be encrypted in the running configuration C. All current encrypted passwords and future passwords will be stored as plain text in the running configuration D. All future passwords will be encrypted in the running configuration Which Cisco IOS command is used to advertise a default route into an OSPF domain regardless of whether a default static route is configured? A. default-information originate B. default-information originate always C. default-information originate permanent D. default-information originate no-check Which ICMP for IPv6 message types are informational messages? (Choose two) A. Packet too big B. Time exceeded C. Echo request D. Echo reply E. Destination unreachable https://www.learncisco.net/courses/icnd-1/introducing-ipv6/ipv6-header-and-icmp.html How do you modify the reference bandwidth with OSPFv3? A. Auto-cost bandwidth B. Auto-cost reference bandwidth C. Change ipv6 bandwidth D. IPv6 ospf reference bandwidth Review the topology. All subnets exist in OSPF area 0. Which command, if issued on R3, would show all the LSAs known by R3? A. Show running-config B. Show ip ospf interface C. Show ip ospf neighbors D. Show ip route ospf E. Show ip ospf database To connect a Cisco wireless LAN controller to a wired network, which of the following would you use? Assume that this connection will carry traffic to and from APs. A. Console port B. Service port C. Distribution system port D. AP data port Suppose two APs are located near each other. Which channel use strategy will result in nonoverlapping channels for Wi-Fi use? (Choose two) A. Use 2.4-GHz channel 1 on AP-A and channel 2 on AP-B. B. Use 2.4-GHz channel 1 on AP-A and 5-GHz channel 48 on AP-B. C. Use 5-GHz channel 36 on AP-A and channel 40 on AP-B. D. Use 5-GHz channel 36 on AP-A and channel 37 on AP-B. Which QoS feature is typically used outbound to an ISP to reduce the amount of traffic that is dropped by exceeding the purchased rate? A. Traffic shaping B. Traffic policing C. Traffic limiting D. Traffic classification Which IOS command always displays OSPF hello timer settings? A. show ip protocols B. show ip route C. show ip ospf interface D. show ip ospf neighbor E. debug ip ospf events Which of the following are available methods of classifying packets in DiffServ on Cisco routers? (Choose three) A. Matching the IP DSCP field B. Matching the 802.1p CoS field C. Matching fields with an extended IP ACL D. Matching the SNMP Location variable For what two purposes does the Ethernet protocol use physical addresses? (Choose two) A. to uniquely identify devices at Layer 2 B. to allow communication with devices on a different network C. to differentiate a Layer 2 frame from a Layer 3 packet D. to establish a priority system to determine which device gets to transmit first E. to allow communication between different devices on the same network F. to allow detection of a remote device when its physical address is unknown https://www.learncisco.net/courses/icnd-1/ethernet-lans/packet-delivery-process.html Which of these are QoS requirements when designing a Cisco voice network? (Choose two) A. Jitter < 30 ms B. Loss < 1% C. One-way delay < 200 ms D. Jitter < 50 ms E. Loss < 2% F. Round-trip delay < 200 ms Which of the following controllers (if any) from Cisco uses a mostly centralized control plane model? A. Cisco Open SDN Controller B. Cisco Application Policy Infrastructure Controller (APIC) C. Cisco APIC Enterprise Module (APIC-EM) D. None of these controllers uses a mostly centralized control plane. An enterprise plans to start using a public cloud service, and is considering different WAN options. The answers list four options under consideration. Which options provide good security by keeping the data private while also providing good QoS services? (Choose two) A. Using private WAN connections directly to the cloud provider B. Using an Internet connection without VPN C. Using an intercloud exchange D. Using an Internet connection with VPN Which IPv6 prefix will the typical enterprise network receive from the service provider? A. /52 B. /56 C. /64 D. /32 E. /48 F. /60 What are the considerations when using Cisco PVST+? (Choose two) A. You can manipulate spanning-tree topologies on a VLAN-by-VLAN basis B. There is only one spanning-tree instance for the entire switched network C. It does not allow load sharing or balancing D. It allows optimal load sharing Which of the following is required when configuring port security with sticky learning? A. Setting the maximum number of allowed MAC addresses on the interface with the switchport port-security maximum interface subcommand B. Enabling port security with the switchport port-security interface subcommand C. Defining the specific allowed MAC addresses using the switchport port-security mac-address interface subcommand D. All the other answers list required commands The IPv6 address “2001:db8:abc:1234:0290:27ff:fe17:fc0f/64“ is assigned to a device. How was the interface portion assigned? A. Manually, using DHCPv6 B. Dynamically, using a random generator C. Manually by an administrator D. Dynamically, using EUI-64 You need to back up the Cisco IOS image of your Catalyst switch to a tftp server. Where is the Cisco IOS image stored? A. Flash B. RAM C. HTTP D. FTP E. USB F. NVRAM Which STP standards cannot be used when you have a mixed topology with Cisco and non-Cisco devices? (Choose three) A. Rapid PVST+ B. MSTP C. RSTP D. PVST+ E. STP What commands would you need to configure to enable DHCP Snooping so that PC4 couldn’t become a rogue DHCP server? A. Configure the following on SW 2: ip dhcp snooping, ip dhcp snooping vlan 10, int gi0/12, ip dhcp snooping trust B. Configure the following on SW 1: ip dhcp snooping, ip dhcp snooping vlan 10, int gi0/24, ip dhcp snooping trust C. Configure the following on SW 2: ip dhcp snooping, ip dhcp snooping vlan 10, int gi0/24, ip dhcp snooping trust D. Configure the following on SW 2: ip dhcp snooping, ip dhcp snooping vlan 20, int gi0/24, ip dhcp snooping trust E. Configure the following on SW 2: ip dhcp snooping, ip dhcp snooping vlan 20, int gi0/12, ip dhcp snooping trust F. Configure the following on SW 1: ip dhcp snooping, ip dhcp snooping vlan 20, int gi0/24, ip dhcp snooping trust Which two commands can be used to verify a trunk link configuration status on a given Cisco switch interface? (Choose two) A. show interface trunk B. show interface interface C. show ip interface brief D. show interface vlan E. show interface switchport https://www.learncisco.net/courses/icnd-1/medium-size-switched-network-construction/troubleshooting-switched-network.html Which three statements accurately describe Layer 2 Ethernet switches? (Choose three) A. Spanning Tree Protocol allows switches to automatically share VLAN information. B. Establishing VLANs increases the number of broadcast domains. C. Switches that are configured with VLANs make forwarding decisions based on both Layer 2 and Layer 3 address information. D. Microsegmentation decreases the number of collisions on the network. E. In a properly functioning network with redundant switched paths, each switched segment will contain one root bridge with all its ports in the forwarding state. All other switches in that broadcast domain will have only one root port. F. If a switch receives a frame for an unknown destination, it uses ARP to resolve the address. https://www.learncisco.net/courses/icnd-1/ethernet-lans/developing-design-for-layer-2.html Which command is used on a Cisco IOS router to enable the DHCP Relay Agent feature on an interface? A. ip dhcp helper B. ip dhcp relay C. ip helper-address D. ip dhcp relay-agent E. ip dhcp transmit F. ip dhcp helper-address Which type of addresses do you find in an Ethernet frame? A. IPv6 B. IPv4 C. AppleTalk D. CLNS E. MAC What type of variable is being shown? Routers = [R1,R2,R3] A. List B. Dictionary C. Simple D. Unsigned integers

Our Recommended Premium CCNA Training Resources

These are the best CCNA training resources online:

Click Here to get the Cisco CCNA Gold Bootcamp, the most comprehensive and highest rated CCNA course online with a 4.8 star rating from over 30,000 public reviews. I recommend this as your primary study source to learn all the topics on the exam.

Want to take your practice tests to the next level? AlphaPrep’s purpose-built Cisco test engine has the largest question bank, adaptive questions, and advanced reporting which tells you exactly when you’re ready to pass the real exam. Click here for your free trial.

The CCNA 200-301 is for the Cisco Certified Network Associate (CCNA) Implementing and Administering Cisco Solutions exam. You can use the practice test to check your knowledge and improve your understanding in preparation for the Cisco CCNA certification exam.

The Cisco CCNA 200-301 practice exam tests include questions to test your knowledge and skills related to Cisco networking fundamentals, which helps you pass the actual exam.

The Cisco CCNA exam objectives include Cisco network fundamentals on routers, switches, IP addresses, etc., network access, IP connectivity such as static and dynamic routing protocol, IP services, network security fundamentals, and automation and programmability.

Cisco CCNA 200-301 Practice Test

Complete this form to get your score report

Our Recommended Premium CCNA Training Resources