Cisco CCNA 200-301 Practice Test

Cisco Practice Tests

Question 1 / 55 - Mode : Exam
Historically, your organization has modified the network device configuration by logging in to the local devices manually. Today, your new CIO has enforced that all configuration changes should be completed on a server in the data center and then pushed out. Which answer lists the correct term for this new approach to configuration? A. Version control B. Centralized configuration C. Configuration drift D. Configuration monitoring Which of the following behaviors are applied to a low latency queue in a Cisco router or switch? (Choose two) A. Shaping B. Policing C. Priority scheduling D. Round-robin scheduling You need to associate fastEthernet0/1 and fastEthernet0/2 with VLAN 10. Which commands would you use to do this? (Choose two) A. int range fastethernet 0/1-2 B. int fastethernet 0/1-2 C. access switchport vlan 10 D. switchport access vlan 10 Refer to the diagram. What is the official name of the network (Network A) that is broadcast by an AP? A. SSID B. BSS C. ESS D. SRDID Which statements define the term block size? (Choose two) A. It is determined exclusively based on the subnet mask B. It is always a value of 8 C. It is the total number of IPv4 addresses within a subnet D. It is the progression between subnets within a specific octet E. It is determined based on the IPv4 address and subnet mask F. It is always a value of 2 An enterprise plans to start using a public cloud service and is considering different WAN options. The answers list four options under consideration. Which one option has the most issues if the company chooses one cloud provider but then later wants to change to use a different cloud provider instead? A. Using private WAN connections directly to the cloud provider B. Using an Internet connection without VPN C. Using an intercloud exchange D. Using an Internet connection with VPN A switch’s port Gi0/1 has been correctly enabled with port security. The configuration sets the violation mode to restrict. A frame that violates the port security policy enters the interface, followed by a frame that does not. Which of the following answers correctly describe what happens in this scenario? (Choose two) A. The switch puts the interface into an err-disabled state when the first frame arrives. B. The switch generates syslog messages about the violating traffic for the first frame. C. The switch increments the violation counter for Gi0/1 by 1. D. The switch discards both the first and second frame. Host A and Host B sit in two different subnets. The path between the subnets of these two hosts runs through three different Layer 3 forwarding devices (routers and Layer 3 switches). A network engineer uses the APIC-EM Path Trace ACL Analysis tool to analyze the path used for Host A to send packets to Host B. Which part of the function is done specifically by the ACL Analysis or ACL Trace part of the tool? A. Discovery of the topology that exists between the two hosts B. Analysis of the Layer 3 forwarding decisions in the path from Host A to B C. Analysis of the Layer 2 forwarding decisions in the path from Host A to B D. Analysis of the impact of ACLs on the packets that would flow from Host A to B How does 802.1q identify the VLAN that the frame belongs to while it crosses the trunk link? A. It encapsulates the entire frame with a 30 byte header and FCS B. It encapsulates the entire frame with a 30 bits header and FCS C. It places a 4 byte tag after the source MAC address in the frame D. It places a 4 bit tag after the source MAC address in the frame It is typical for server processors to utilize a technique that allows each physical processing core to be split into a number of virtual cores; this is commonly referred to as __________. A. processor virtualization B. multi-threading C. virtual processing D. processor switching Which command is used to generate local RSA keys that will be used for SSH connections to a Cisco IOS device? A. crypto generate rsa key B. crypto generate key rsa C. crypto key generate rsa D. crypto rsa generate key Review the topology. All subnets exist in OSPF area 0. Which command, if issued on R3, would show all the LSAs known by R3? A. Show running-config B. Show ip ospf interface C. Show ip ospf neighbors D. Show ip route ospf E. Show ip ospf database An engineer connects to Router R1 and issues a show ip ospf neighbor command. The status of neighbor 2.2.2.2 lists FULL/BDR. What does the BDR mean? A. R1 is an Area Border Router. B. R1 is a backup designated router. C. Router 2.2.2.2 is an Area Border Router. D. Router 2.2.2.2 is a backup designated router. Which of the following are required attributes of a REST-based API? (Choose two) A. Uses HTTP B. Objects noted as to whether they can be cached C. Classful operation D. Client/server architecture What is the default security violation mode for port security on a Cisco 2960 Catalyst switch? A. Disable B. Shutdown C. Protect D. None E. Restrict F. Err-disable Which public cloud WAN connection options do not offer the ability to have reliable QoS? (Choose two) A. Internet B. Internet VPN C. MPLS VPN D. Ethernet VPN E. Intercloud Which VLAN troubleshooting steps are used when there is no connection between PCs? (Choose two) A. Use the [show interfaces switchport] command to see if the native VLAN matches on both sides B. Use the [show interfaces trunk] command to check whether the VLAN is assigned the correct membership C. Use the [show vlan] command to verify that the port is in the correct VLAN D. Use the [show mac address-table] command to check which addresses were learned on a particular port and which VLAN that port is assigned https://www.learncisco.net/courses/icnd-1/medium-size-switched-network-construction/troubleshooting-switched-network.html Which command stores passwords as an SHA-256 or MD5 hash? A. service password-encryption B. service password-encryption {sha256 \| md5} C. enable password {sha256 \| md5} D. enable hash-password E. None of the above. When comparing next-generation IPS to traditional IPS, what additional capabilities can be leveraged to more efficiently block traffic? (Choose three) A. AVC B. Signature-based filtering C. Contextual awareness D. Event impact level Which physical layer media are used today for connecting network devices (switches and routers) together in a LAN? (Choose two) A. Coaxial B. Twisted copper pair C. Fiber optic D. Wireless You can use output filters in combination with any show command. Which of the following leaves out all output lines that match the filtering expression? A. include B. exclude C. begin D. section https://www.learncisco.net/courses/icnd-1/lan-connections/starting-a-router.html Review the topology diagram. Network 10.123.0.0/24 is the backbone area. Network 10.12.0.0/24 is area 1, and network 10.34.0.0/29 is in area 2. Which of the following are true? (Choose three) A. R1 is a backbone router. B. R1 is an ABR. C. R1 is an internal router. D. R3 would see the OSPF network of 10.12.0.0/24 as an intra-area route. E. R1 and R3 would have the same LSA information about the backbone area. Given the output from a working OSPF router, as seen in the exhibit, how many neighboring routers exist? B. 1 C. 2 D. 3 E. More than 3 Refer to the exhibit. Which two statements are true of the interfaces on Switch? (Choose two) A. Multiple devices are connected directly to FastEthernet0/1. B. A hub is connected directly to FastEthernet0/5. C. FastEthernet0/1 is connected to a host with multiple network interface cards. D. FastEthernet0/5 has statically assigned MAC addresses. E. FastEthernet0/1 is configured as a trunk link. F. Interface FastEthernet0/2 has been disabled. Of the figures shown, which depicts an accurate Clos Architecture? A. Topology A B. Topology B C. Topology C D. Topology D You need to verify which interfaces have been enabled for port security and the security action that will be taken if a violation occurs. Which show command will provide this information? A. show interfaces B. show port-security interface C. show port-security address D. show port-security E. show ip interface F. show ip interface brief You need to apply a filter for IP subnets 172.16.0.0/24 to 172.16.15.0/24. What is the wildcard mask? A. 0.0.15.0 B. 0.0.0.255 C. 0.0.255.255 D. 0.0.15.255 E. 0.0.16.255 https://www.learncisco.net/courses/icnd-1/acls-and-nat/acl-wildcard-masking.html Which command is used to set your Cisco IOS device as an authoritative time source that will be used as the trusted time source? A. ntp master B. ntp server C. ntp client D. ntp peer Robust wireless encryption is based on which of the following algorithms? A. WEP B. AES C. DES D. IPsec Which command could you enter to encrypt passwords? A. enable secret B. username {username} secret {password} C. service password-encryption D. All of the above E. None of the above Which of the following controllers (if any) from Cisco uses a mostly centralized control plane model? A. Cisco Open SDN Controller B. Cisco Application Policy Infrastructure Controller (APIC) C. Cisco APIC Enterprise Module (APIC-EM) D. None of these controllers uses a mostly centralized control plane. Which statements correctly define variable-length subnet masking (VLSM)? (Choose two) A. The process of creating subnets with different length masks and deploying them throughout the network B. The process of creating subnets with the same length masks and deploying them throughout the network C. The process of taking a default Class A, B, or C network and subnetting it D. The process of taking an existing subnet and subnetting it again Which of the following describes the PVST+ protocol? A. Assumes one 802.1D spanning tree for the entire bridged network B. Provides a separate 802.1D spanning tree for each virtual LAN, or VLAN, configured C. Provides fast conversion with a single instance of STP D. Provides fast conversion with an instance of spanning tree per VLAN https://www.learncisco.net/courses/icnd-2/vlans-and-spanning-tree/stp-protocol-types.html Which statement describes how to create VLANs? A. Use the [vian interface] command B. Use the [vlan] global configuration command C. Use the [switchport vlan name] command https://www.learncisco.net/courses/icnd-2/vlans-and-spanning-tree/vlan-operations.html Refer to the exhibit. What is the most appropriate summarization for these routes? A. 10.0.0.0 /21 B. 10.0.0.0 /22 C. 10.0.0.0 /23 D. 10.0.0.0 /24 Which command is used to enable port security on an interface? A. switchport port-security violation mode B. switchport port-security C. switchport access vlan vlan-number D. switchport mode access E. switchport port-security maximum number F. switchport port-security mac-address mac_address Refer to the exhibit. Which subnet mask will place all hosts on Network B in the same subnet with the least amount of wasted addresses? A. 255.255.255.0 B. 255.255.254.0 C. 255.255.252.0 D. 255.255.248.0 Which IEEE standard protocol is initiated as a result of successful DTP completion in a switch over Fast Ethernet? A. 802.3ad B. 802.1w C. 802.1D D. 802.1Q https://www.learncisco.net/courses/icnd-2/vlans-and-spanning-tree/dynamic-trunking-protocol.html Consider the following scenario: Host A has IP address 192.168.6.3 and MAC address 0800:0111:3333. Host B has IP address 192.168.7.3 and MAC address 0800:0222:4444. The router has IP address 192.168.7.1 and MAC address 0800:0444:1111. When Host B receives a packet from Host A, the frame contains the source and destination IP and MAC addresses. What should be the source IP address? A. 0800:0444:1111 B. 192.168.7.3 C. 192.168.6.3 D. 0800:0222:4444 https://www.learncisco.net/courses/icnd-1/lan-connections/packet-delivery-process-at-l3.html In a reflection attack, the source IP address in the attack packets is spoofed so that it contains which one of the following entities? A. The address of the attacker B. The address of the reflector C. The address of the victim D. The address of the router What causes speed-related port access issues? (Choose two) A. Both ends of the segment are set to autonegotiate speed B. The distance between the first and last host on the segment is too long C. The duplex setting on both ends is set to full duplex D. One end is set to autonegotiate and the other to high speed https://www.learncisco.net/courses/icnd-1/ethernet-lans/troubleshooting-switch-issues.html When using the “show etherchannel summary“ command, what does the “u“ flag signify? A. Waiting to be aggregated B. Suspended C. In use D. Unsuitable for bundling Review the following router configuration and identify the correct statements regarding telnet access to the router: Router(config)#access-list 1 deny host 10.1.20.1 Router(config)#access-list 1 deny host 10.1.20.2 Router(config)#access-list 1 permit host 10.1.10.1 Router(config)#access-list 1 permit host 10.1.10.2 Router(config)#access-list 1 permit 10.1.20.0 0.0.0.255 Router(config)#line vty 0 4 Router(config-line)#access-class 1 in (Choose two) A. Telnet access from all hosts in the 10.1.20.0/24 network is denied except 10.1.20.1 and 10.1.20.2 B. Telnet access from hosts 10.1.20.1 and 10.1.20.2 is allowed C. Telnet access from hosts 10.1.10.1 and 10.1.10.2 is allowed D. Telnet access from all hosts in the 10.1.10.0/24 network is allowed E. Telnet access from all hosts in the 10.1.20.0/24 network is allowed except 10.1.20.1 and 10.1.20.2 F. Telnet attempts that are denied will generate a syslog message When are VTP messages sent to clients for synchronization while using a VTP server? (Choose two) A. Every five minutes by default B. Every ten minutes by default C. Only when manually triggered D. Any time there is a change Which of the following are available methods of classifying packets in DiffServ on Cisco routers? (Choose three) A. Matching the IP DSCP field B. Matching the 802.1p CoS field C. Matching fields with an extended IP ACL D. Matching the SNMP Location variable Regarding lightweight AP modes, which one of the following is true? A. An AP can operate in multiple modes at the same time. B. An AP only has one possible mode of operation. C. The Run mode is the default mode. D. The SE-Connect mode is used for spectrum analysis. Which actions must be performed to implement SNMP access to the router? (Choose two) A. Configure a community access string with a read-write privileged to permit access to SNMP B. Authenticate access to MIB objects and functions as embedded passwords C. Set the system contact and location of the SNMP agent on the router D. Obtain values for the 5 minute exponentially moving average of the CPU busy percentage https://www.learncisco.net/courses/icnd-2/network-management/snmp-v1-v2c-v3-overview-and-configuration.html Which statements describe the characteristics of port security? (Choose two) A. Sticky learning adds dynamically learned addresses to the running configuration B. Ports configured with port security only accept frames from addresses that have been learned or the ones that have been configured C. Addresses must be manually added to the switch D. It restricts port access using IP addresses https://www.learncisco.net/courses/icnd-1/ethernet-lans/switch-security.html Why doesn't increasing the number of uplinks solve congestion issues from multiple links aggregating on a switch? A. All traffic must pass through one physical link B. Multiple links require extra overhead C. All uplinks must be running at the same speed D. STP disables ports to prevent loops Which of these are QoS requirements when designing a Cisco voice network? (Choose two) A. Jitter < 30 ms B. Loss < 1% C. One-way delay < 200 ms D. Jitter < 50 ms E. Loss < 2% F. Round-trip delay < 200 ms By default, what is the status of a Cisco IOS ISR interface? A. administratively down, down B. down, down C. up, up D. up, down Identify the fields in an IPv4 header. (Choose three) A. Host component B. Time to Live C. Source address D. Destination address E. Network address https://www.learncisco.net/courses/icnd-1/building-a-network/tcpip-internet-layer.html With IEEE 802.1x, which role does a LAN switch typically play? A. Authentication server B. Supplicant C. Translator D. Authenticator A _________ is a virtual instance of a traditional networking device that a consumer can use in a cloud. A. virtual network function B. virtual network appliance C. network virtualized element D. network cloud device You have the network 192.168.5.0/24 that has been subnetted to /30 networks. What is the subnet ID of the seventh subnet that was created? A. 192.168.5.28/30 B. 192.168.5.16/30 C. 192.168.5.12/30 D. 192.168.5.24/30 E. 192.168.5.32/30 F. 192.168.5.20/30

Our Recommended Premium CCNA Training Resources

These are the best CCNA training resources online:

Click Here to get the Cisco CCNA Gold Bootcamp, the most comprehensive and highest rated CCNA course online with a 4.8 star rating from over 30,000 public reviews. I recommend this as your primary study source to learn all the topics on the exam.

Want to take your practice tests to the next level? AlphaPrep’s purpose-built Cisco test engine has the largest question bank, adaptive questions, and advanced reporting which tells you exactly when you’re ready to pass the real exam. Click here for your free trial.

The CCNA 200-301 is for the Cisco Certified Network Associate (CCNA) Implementing and Administering Cisco Solutions exam. You can use the practice test to check your knowledge and improve your understanding in preparation for the Cisco CCNA certification exam.

The Cisco CCNA 200-301 practice exam tests include questions to test your knowledge and skills related to Cisco networking fundamentals, which helps you pass the actual exam.

The Cisco CCNA exam objectives include Cisco network fundamentals on routers, switches, IP addresses, etc., network access, IP connectivity such as static and dynamic routing protocol, IP services, network security fundamentals, and automation and programmability.

Cisco CCNA 200-301 Practice Test

Complete this form to get your score report

Our Recommended Premium CCNA Training Resources