Cisco CCNA 200-301 Practice Test

Cisco Practice Tests

Question 1 / 55 - Mode : Exam
Why should you implement port security on a switch interface? A. To control which devices are allowed to access the network B. To prevent Layer 2 loops from occurring C. To prevent a unidirectional link D. To prevent MAC address flooding attacks E. To control which devices are allowed to manage the switch You have implemented DAI on a Layer 2 switch in your network. Now you want to monitor the ARP message rates with an average of four received ARP messages a second. Which command(s) would need to be utilized to accomplish this? (Choose two) A. ip arp inspection limit rate 8 burst interval 2 B. ip arp inspection limit rate 4 burst interval 2 C. ip arp inspection limit rate 10 burst interval 5 D. ip arp inspection limit rate 20 burst interval 5 What causes speed-related port access issues? (Choose two) A. Both ends of the segment are set to autonegotiate speed B. The distance between the first and last host on the segment is too long C. The duplex setting on both ends is set to full duplex D. One end is set to autonegotiate and the other to high speed https://www.learncisco.net/courses/icnd-1/ethernet-lans/troubleshooting-switch-issues.html Which Cisco IOS command is used to advertise a default route into an OSPF domain regardless of whether a default static route is configured? A. default-information originate B. default-information originate always C. default-information originate permanent D. default-information originate no-check Given the output from a working OSPF router, as seen in the exhibit, how many neighboring routers exist? B. 1 C. 2 D. 3 E. More than 3 Which of the following layer 2 WAN protocols is the most scalable transport technology ever developed? A. HDLC B. Ethernet C. Frame Relay D. ATM E. PPP https://www.learncisco.net/courses/icnd-2/wan-technologies/serial-encapsulation.html Which cloud service model provides access to an application that is built, monitored, and offered by the cloud provider? A. TaaS B. IaaS C. PaaS D. SaaS Review the following router configuration and identify the correct statements regarding telnet access to the router: Router(config)#access-list 1 deny host 10.1.20.1 Router(config)#access-list 1 deny host 10.1.20.2 Router(config)#access-list 1 permit host 10.1.10.1 Router(config)#access-list 1 permit host 10.1.10.2 Router(config)#access-list 1 permit 10.1.20.0 0.0.0.255 Router(config)#line vty 0 4 Router(config-line)#access-class 1 in (Choose two) A. Telnet access from all hosts in the 10.1.20.0/24 network is denied except 10.1.20.1 and 10.1.20.2 B. Telnet access from hosts 10.1.20.1 and 10.1.20.2 is allowed C. Telnet access from hosts 10.1.10.1 and 10.1.10.2 is allowed D. Telnet access from all hosts in the 10.1.10.0/24 network is allowed E. Telnet access from all hosts in the 10.1.20.0/24 network is allowed except 10.1.20.1 and 10.1.20.2 F. Telnet attempts that are denied will generate a syslog message Where is the start-up configuration file stored and loaded from by default on a Cisco IOS router? A. FLASH B. NVRAM C. RAM D. TFTP E. ROM Four OSPF routers connect to the same LAN. In a new election after all routers have been rebooted, which router wins the DR election? A. R4, router-id 4.4.4.4, priority 1 B. R3, router-id 3.3.3.3, priority 2 C. R1, router-id 1.1.1.1, priority 4 D. R2, router-id 2.2.2.2, priority 3 Refer to the exhibit. The network administrator normally establishes a Telnet session with the switch from host A. However, host A is unavailable. The administrator's attempt to telnet to the switch from host B fails, but pings to the other two hosts are successful. What is the issue? A. Host B and the switch need to be in the same subnet. B. The switch interface connected to the router is down. C. Host B needs to be assigned an IP address in VLAN 1. D. The switch needs an appropriate default gateway assigned. E. The switch interfaces need the appropriate IP addresses assigned. You are configuring dynamic NAT on your Cisco IOS router that is connected to your ISP. What would be used to define the private IPv4 addresses that can be translated to public IPv4 addresses? (Choose three) A. An access list B. An IP NAT pool C. The ip nat inside command D. The ip nat outside command E. The ip nat inside source list command Which of the following components executes operating system instructions? A. Interface B. ROM C. Flash D. RAM E. CPU F. NVRAM https://www.learncisco.net/courses/icnd-2/network-management/router-internal-components-overview.html What is the purpose of the “service password-encryption“ command? A. It encrypts all passwords on your router. B. It encrypts the line console password only. C. It encrypts the vty password only. D. It is not a valid cisco command Think about a policing function that is currently working, and also think about a shaping function that is also currently working. That is, the current bit rate of traffic exceeds the respective policing and shaping rates. Which statements are true about these features? (Choose two) A. The policer may or may not be discarding packets. B. The policer is definitely discarding packets. C. The shaper may or may not be queuing packets to slow down the sending rate. D. The shaper is definitely queuing packets to slow down the sending rate. Which of the following controllers (if any) from Cisco uses a mostly centralized control plane model? A. Cisco Open SDN Controller B. Cisco Application Policy Infrastructure Controller (APIC) C. Cisco APIC Enterprise Module (APIC-EM) D. None of these controllers uses a mostly centralized control plane. Which option can you choose for saving money while securing your WAN connections? A. Enterprise Managed VPN B. Service Provider VPN C. SSL VPN D. Access Control VPN A Cisco Catalyst switch connects to what should be individual user PCs. Each port has the same port security configuration, configured as follows: interface range gigabitethernet 0/1 - 24 switchport mode access switchport port-security switchport port-security mac-address sticky Which of the following answers describe the result of the port security configuration created with these commands? (Choose two) A. Prevents unknown devices with unknown MAC addresses from sending data through the switch ports. B. If a user connects a switch to the cable, prevents multiple devices from sending data through the port. C. Will allow any one device to connect to each port, and will save that device’s MAC address into the startup-config D. Will allow any one device to connect to each port, but will not save that device’s MAC address into the startup-config Which of the following are the features of EIGRP? (Choose three) A. Classful routing B. Stub areas C. Classless routing D. Reduced bandwidth usage E. Rapid convergence Host A and Host B sit in two different subnets. The path between the subnets of these two hosts runs through three different Layer 3 forwarding devices (routers and Layer 3 switches). A network engineer uses the APIC-EM Path Trace ACL Analysis tool to analyze the path used for Host A to send packets to Host B. Which part of the function is done specifically by the ACL Analysis or ACL Trace part of the tool? A. Discovery of the topology that exists between the two hosts B. Analysis of the Layer 3 forwarding decisions in the path from Host A to B C. Analysis of the Layer 2 forwarding decisions in the path from Host A to B D. Analysis of the impact of ACLs on the packets that would flow from Host A to B Which cloud service is specific to one company that owns both the tools/infrastructure that creates the cloud and the people that use the services? A. Hybrid cloud B. Public cloud C. Private cloud D. Internal cloud A user is experiencing a loss of end-to-end connectivity in an IPv4 network. You have verified that there is no physical connectivity issue. Logically, what should you check next? A. Whether the current path is undesirable B. Whether there is a physical connectivity issue C. Whether the name resolutions are correct D. Whether an access control list, or ACL is blocking traffic https://www.learncisco.net/courses/icnd-2/troubleshooting-basic-connectivity/troubleshooting-connectivity.html How should be configured a switch so that it could be accessed remotely? A. Assign a password and privilege level B. Apply the access control list, or ACL, to the virtual type terminal, or vty, lines C. Configure a gateway for the switch D. Generate a certificate https://www.learncisco.net/courses/icnd-1/ethernet-lans/starting-a-switch.html You want to establish a static address translation between an inside local and inside global address. What command should you use? A. ip nat outside B. ip nat inside source C. ip nat pool https://www.learncisco.net/courses/icnd-1/acls-and-nat/address-translation.html Which of the following should be considered when implementing VLANs? (Choose three) A. VLAN 1 is the default VLAN B. The Native VLAN should also be VLAN 1 C. The maximum number of VLANs is switch dependent D. Management traffic must always be in VLAN 1 E. The default VLAN needs to be identified during initial VLAN deployment F. The maximum number of VLANs on all switches if 4094 G. The Native VLAN should be changed Which command is used to enable IPv6 routing? A. ipv6 router B. ipv6 unicast-routing C. enable ipv6 D. ipv6 eigrp You have the Class B network 172.16.0.0/16 and want to create 16 subnets. What will the new subnet mask be for the 16 subnets? A. /18 B. /19 C. /21 D. /17 E. /22 F. /20 If you take the network 192.168.1.0/24 and create four subnets from it, what are the new subnet IDs? (Choose four) A. 192.168.1.128 B. 192.168.1.32 C. 192.168.1.96 D. 192.168.1.64 E. 192.168.1.192 F. 192.168.1.0 Your Cisco IOS router is acting as a DHCP server. Which command will display the addresses that have been handed out to clients on the LAN? A. show ip dhcp assignments B. show ip dhcp address C. show ip dhcp conflicts D. show ip dhcp bindings E. show ip dhcp pool Which command is used to create a backup copy of your Cisco IOS image and store it in a TFTP server? A. copy system tftp B. copy flash tftp C. copy tftp system D. copy tftp nvram E. copy nvram tftp F. copy tftp flash Identify the true statements about VLANs and trunking with IEEE 802.1Q. (Choose three) A. The native VLAN should be changed from the default for security B. The layer 2 header must be adjusted to keep track of VLAN origins C. All VLANs have a tag D. Inter Switch Link and IEEE 802.1 Q are trunking protocols E. Access ports carry traffic for multiple VLANs https://www.learncisco.net/courses/icnd-1/medium-size-switched-network-construction/vlans-and-trunk.html In what security zone are the public web servers located? A. DMZ B. Inside C. Outside D. Campus The Wi-Fi Alliance offers which of the following certifications for wireless devices that correctly implement security standards? A. WEP B. WPA2 C. 802.11 D. AES What type of access-control list allows you to match traffic based on protocols and port numbers? A. Standard IPv4 numbered ACL B. MAC address ACL C. Standard IPv4 named ACL D. Extended IPv4 numbered ACL Which two are features of IPv6? (Choose two) A. anycast B. broadcast C. multicast D. podcast E. allcast https://www.learncisco.net/courses/icnd-1/introducing-ipv6/the-ipv6-address.html Refer to the diagram. What is the official name of the network (Network A) that is broadcast by an AP? A. SSID B. BSS C. ESS D. SRDID What commands would you need to configure to enable DHCP Snooping so that PC4 couldn’t become a rogue DHCP server? A. Configure the following on SW 2: ip dhcp snooping, ip dhcp snooping vlan 10, int gi0/12, ip dhcp snooping trust B. Configure the following on SW 1: ip dhcp snooping, ip dhcp snooping vlan 10, int gi0/24, ip dhcp snooping trust C. Configure the following on SW 2: ip dhcp snooping, ip dhcp snooping vlan 10, int gi0/24, ip dhcp snooping trust D. Configure the following on SW 2: ip dhcp snooping, ip dhcp snooping vlan 20, int gi0/24, ip dhcp snooping trust E. Configure the following on SW 2: ip dhcp snooping, ip dhcp snooping vlan 20, int gi0/12, ip dhcp snooping trust F. Configure the following on SW 1: ip dhcp snooping, ip dhcp snooping vlan 20, int gi0/24, ip dhcp snooping trust __________ means that the QoS tool changes one or more header fields, setting a value in the header. A. Marking B. Classifying C. Insertion D. Qualifying A queuing system has three queues serviced with round robin scheduling and one low latency queue that holds all voice traffic. Round robin queue 1 holds predominantly UDP traffic, while round robin queues 2 and 3 hold predominantly TCP traffic. The packets in each queue happen to have a variety of DSCP markings per the QoS design. In which queues would it make sense to use a congestion avoidance (drop management) tool? (Choose two) A. The LLQ B. Queue 1 C. Queue 2 D. Queue 3 Which of the following QoS marking fields could remain with a packet while being sent through four different routers, over different LAN and WAN links? (Choose two) A. CoS B. IPP C. DSCP D. MPLS EXP While troubleshooting a connectivity issue on a Branch router, you realize that it is not forming a neighbor relationship with the HQ router. What statements are correct about OSPF neighbors? (Choose two) A. A successful ping from the Branch router to the HQ router will indicate IP connectivity between the two B. The [show ip interface brief] command verifies layer 3 connectivity C. Use the [show ip interface brief] command to verify that the status and protocol on the interface is up D. Regardless of the OSPF area configured, the neighbor adjacency will form if layer 2 and layer 3 connectivity is established https://www.learncisco.net/courses/icnd-2/implementing-a-multiarea-ospf-solution/troubleshooting-multiarea-ospf.html Which option is not one of the most commonly deployed virtualization vendors and products? A. Oracle XenSpace B. Microsoft Hyper-V C. VMware vCenter D. Red Hat KVM Imagine you configured OSPFv2 in a small lab network. Which of the following answers list a condition that could keep the routers in your lab from learning all the routes to all the IPv4 routes in your small lab network? (Choose two) A. An ACL could be blocking router advertisements. B. Two neighboring routers that connect to the same link have been configured with the same OSPF area and with the same IPv4 subnet mask. C. Any physical layer problem that would prevent two neighboring routers from being able to ping each others IPv4 addresses in the subnet that exists between the two routers. D. Two neighboring routers that connect to the same link have been configured with the same OSPF process ID on the router ospf command. Looking at the exhibit, what key:value pair option has a value that is numeric in nature? A. ”upTime”: ”45 days, 13:36:14.80”, B. ”lastUpdated”: ”2019-10-29 02:52:00”, C. ”managementIpAddress”: ”10.230.1.1”, D. ”lastUpdateTime”: 1572317520439 Which switch ”show” command is used frequently when checking line and protocol status? A. show version B. show interfaces C. show running-config https://www.learncisco.net/courses/icnd-1/ethernet-lans/starting-a-switch.html The configuration register on your Cisco IOS 2900 series router is set to 0x2101. How will the router choose the IOS image during the boot process? A. The last image located in flash will be booted B. The first image located in flash will be booted C. The image listed in the boot system command will be booted D. The image located on a TFTP server will be booted Regarding lightweight AP modes, which one of the following is true? A. An AP can operate in multiple modes at the same time. B. An AP only has one possible mode of operation. C. The Run mode is the default mode. D. The SE-Connect mode is used for spectrum analysis. In Software-Defined Access (SDA), which of the answers are part of the overlay data plane? A. LISP B. GRE C. OSPF D. VXLAN Routing tables can be populated in a number of different ways. Which of the following describes the dynamic routing route type? A. Router attached to this network B. The router interface has a local IP address C. A system administrator manually enters static routes directly into the configuration D. Learned by exchanging routing information E. Used when no explicit route to a destination is found https://www.learncisco.net/courses/icnd-2/troubleshooting-basic-connectivity/identification-of-the-path.html Of the figures shown, which depicts an accurate Clos Architecture? A. Topology A B. Topology B C. Topology C D. Topology D What can VLANs be used for? (Choose two) A. To maximize device resources B. To segment a physical switch into logical broadcast domains C. To prevent specific protocols from entering your network D. To eliminate the need for routers You have an ACL entry that has the address of 192.168.101.0 and the wildcard mask of 0.0.0.255. What is the range of IPv4 addresses that will be affected by this ACL? A. 192.168.101.100 through 192.168.101.200 B. 192.168.101.200 through 192.168.101.255 C. 192.168.101.0 through 192.168.101.100 D. 192.168.101.0 through 192.168.101.255 E. 192.168.101.0 through 0.0.0.255 Refer to the diagram. What is the name of the device (referenced with the arrow) that communicates with wireless clients? A. Wireless controller B. Access point C. Router D. Wireless bridge Which of the following correctly describe steps in the OSI data encapsulation process? (Choose two) A. The transport layer divides a data stream into segments and may add reliability and flow control information. B. The data link layer adds physical source and destination addresses and an FCS to the segment. C. Packets are created when the network layer encapsulates a frame with source and destination host addresses and protocol-related control information. D. Packets are created when the network layer adds Layer 3 addresses and control information to a segment. E. The presentation layer translates bits into voltages for transmission across the physical link. https://www.learncisco.net/courses/ccna/part-1-internetworking/data-encapsulation.html You have configured your PC with multiple default gateways. R1 is the primary default gateway. R2 is the secondary default gateway. What is the best action to ensure redundancy of the default gateway if R1 goes down? A. Create an entry in the R1 routing table to route traffic to R2 B. Manually change the primary default gateway from R1 to R2 C. Ensure that you are using a First Hop Redundancy Protocol D. Nothing, as multiple gateways have been configured

Our Recommended Premium CCNA Training Resources

These are the best CCNA training resources online:

Click Here to get the Cisco CCNA Gold Bootcamp, the most comprehensive and highest rated CCNA course online with a 4.8 star rating from over 30,000 public reviews. I recommend this as your primary study source to learn all the topics on the exam.

Want to take your practice tests to the next level? AlphaPrep’s purpose-built Cisco test engine has the largest question bank, adaptive questions, and advanced reporting which tells you exactly when you’re ready to pass the real exam. Click here for your free trial.

The CCNA 200-301 is for the Cisco Certified Network Associate (CCNA) Implementing and Administering Cisco Solutions exam. You can use the practice test to check your knowledge and improve your understanding in preparation for the Cisco CCNA certification exam.

The Cisco CCNA 200-301 practice exam tests include questions to test your knowledge and skills related to Cisco networking fundamentals, which helps you pass the actual exam.

The Cisco CCNA exam objectives include Cisco network fundamentals on routers, switches, IP addresses, etc., network access, IP connectivity such as static and dynamic routing protocol, IP services, network security fundamentals, and automation and programmability.

Cisco CCNA 200-301 Practice Test

Complete this form to get your score report

Our Recommended Premium CCNA Training Resources