Cisco CCNA 200-301 Practice Test

Cisco Practice Tests

Question 1 / 55 - Mode : Exam
High levels of humidity pose a danger to the devices in your network. What type of threat is this categorized as? A. Maintenance B. Physical C. Environmental D. Remote Access E. Local Access F. Electrical Which of the following statements accurately describe classless and classful routing? (Choose two) A. To have the subnet mask information advertised all the time, you should use classful routing protocols B. When a classful routing protocol is used, all subnetworks of the same major network must use the same subnet mask C. In routing updates, classful routing protocols pass the subnet mask information D. With classful routing protocols, the subnet mask is not exchanged during the routing update process Why should you implement port security on a switch interface? A. To control which devices are allowed to access the network B. To prevent Layer 2 loops from occurring C. To prevent a unidirectional link D. To prevent MAC address flooding attacks E. To control which devices are allowed to manage the switch Which option should be used with the “switchport trunk allowed vlan“ command to include specified VLANs in the existing list of allowed VLANs on a trunk link? A. add B. except C. remove D. none E. all Suppose you would like to select a method to protect the privacy and integrity of wireless data. Which one of the following methods should you avoid because it has been deprecated? A. TKIP B. CCMP C. GCMP D. EAP Which of the following describes a static NAT configuration? A. Manually configured, one-to-one address mapping B. Automatically assigned from an address pool, many-to-many address mapping C. Many-to-one address mapping https://www.learncisco.net/courses/icnd-1/acls-and-nat/address-translation.html Which command is used to create a standard numbered IPv4 ACL? A. access-list numbered B. ip access-list C. numbered access-list D. access-list ip E. access-list Which IOS command always displays OSPF hello timer settings? A. show ip protocols B. show ip route C. show ip ospf interface D. show ip ospf neighbor E. debug ip ospf events Which command is used to verify the DHCP relay agent address that has been set up on your Cisco IOS router? A. show ip interface brief B. show ip dhcp bindings C. show ip route D. show ip interface E. show interface F. show ip dhcp pool Your router has just received a packet that is destined to 10.1.1.97. Which entry in the routing table will be used to forward the packet? A. 10.1.1.0/25 B. 10.1.1.64/27 C. 0.0.0.0/0 D. 10.1.1.64/26 E. 10.1.1.32/27 F. 10.1.1.0/24 G. 10.1.1.80/28 An engineer connects to Router R1 and issues a show ip ospf neighbor command. The status of neighbor 2.2.2.2 lists FULL/BDR. What does the BDR mean? A. R1 is an Area Border Router. B. R1 is a backup designated router. C. Router 2.2.2.2 is an Area Border Router. D. Router 2.2.2.2 is a backup designated router. Which QoS feature is typically used inbound to a network to limit the amount of traffic that is allowed to flow in? A. Traffic classification B. Traffic shaping C. Traffic limiting D. Traffic policing Which command would you use to specify a VLAN's ID on a switch? A. vlan 20 B. configure vlan 20 C. name 20 D. vlan sales In a split-MAC architecture, real-time functions such as encryption are handled in which of the following network entities? A. An access layer switch B. A distribution layer switch C. A wireless LAN controller D. A lightweight AP How many default vty lines exist on a Cisco IOS router? A. 20 B. 1 C. 5 D. 10 E. 15 Devices using a wireless LAN must operate in which one of the following modes? A. Round-robin access B. Half duplex C. Full duplex D. None of these answers A _________ is a virtual instance of a traditional networking device that a consumer can use in a cloud. A. virtual network function B. virtual network appliance C. network virtualized element D. network cloud device What are the results of subnetting a large Class A network? (Choose two) A. Support fewer networks as compared to the original Class A network B. Support more devices in each network as compared to the original Class A network C. Support more networks as compared to the original Class A network D. Support fewer devices in each network as compared to the original Class A network The show port-security interface f0/1 command lists a port status of Secure-shutdown. Which of the following answer must be true about this interface at this time? A. The show interface status command lists the interface status as connected. B. The show interface status command lists the interface status as err-disabled. C. The show port-security interface command could list a mode of shutdown or restrict, but not protect. D. The show port-security interface command could list a violation counter value of 10. Which of the following describes the Rapid PVST+ protocol? A. Assumes one 802.1D spanning tree for the entire bridged network B. Provides a separate 802.1D spanning tree for each virtual LAN, or VLAN, configured C. Provides fast conversion with a single instance of STP D. Provides fast conversion with an instance of spanning tree per VLAN https://www.learncisco.net/courses/icnd-2/vlans-and-spanning-tree/stp-protocol-types.html Which of the following behaviors are applied to a low latency queue in a Cisco router or switch? (Choose two) A. Shaping B. Policing C. Priority scheduling D. Round-robin scheduling What command should you configure globally to enable a 15-minute recovery time for the port security errdisable state? A. errdisable recovery interval 15 B. errdisable recovery timer 15 C. errdisable recovery timer 900 D. errdisable recovery interval 900 Some IOS commands store passwords as clear text, but you can then encrypt the passwords with the service password-encryption global command. By comparison, other commands store a computed hash of the password, rather than storing the password. Comparing the two options, which one answer is the most accurate about why one method is better than the other? A. Using hashes is preferred because encrypted IOS passwords can be easily decrypted. B. Using hashes is preferred because of the large CPU effort required for encryption. C. Using encryption is preferred because it provides stronger password protection. D. Using encryption is preferred because of the large CPU effort required for hashes. You can use output filters in combination with any show command. Which of the following leaves out all output lines that match the filtering expression? A. include B. exclude C. begin D. section https://www.learncisco.net/courses/icnd-1/lan-connections/starting-a-router.html Which IPv6 prefix will the typical enterprise network receive from the service provider? A. /52 B. /56 C. /64 D. /32 E. /48 F. /60 Refer to the exhibit. Which switch provides the spanning-tree designated port role for the network segment that services the printers? A. Switch1 B. Switch2 C. Switch3 D. Switch4 Which features are used to extend the lifetime and usefulness of IPv4 networks? (Choose four) A. Private Addressing B. VLSM C. CIDR D. VLANs E. Public Addressing F. NAT G. IPv6 Which cloud service is specific to one company that owns both the tools/infrastructure that creates the cloud and the people that use the services? A. Hybrid cloud B. Public cloud C. Private cloud D. Internal cloud Refer to the diagram. What method of authentication is being used? A. Open authentication B. CCMP C. WEP D. 802.1x What commands would you need to configure to enable DHCP Snooping so that PC4 couldn’t become a rogue DHCP server? A. Configure the following on SW 2: ip dhcp snooping, ip dhcp snooping vlan 10, int gi0/12, ip dhcp snooping trust B. Configure the following on SW 1: ip dhcp snooping, ip dhcp snooping vlan 10, int gi0/24, ip dhcp snooping trust C. Configure the following on SW 2: ip dhcp snooping, ip dhcp snooping vlan 10, int gi0/24, ip dhcp snooping trust D. Configure the following on SW 2: ip dhcp snooping, ip dhcp snooping vlan 20, int gi0/24, ip dhcp snooping trust E. Configure the following on SW 2: ip dhcp snooping, ip dhcp snooping vlan 20, int gi0/12, ip dhcp snooping trust F. Configure the following on SW 1: ip dhcp snooping, ip dhcp snooping vlan 20, int gi0/24, ip dhcp snooping trust Routing tables can be populated in a number of different ways. Which of the following describes the directly connected route type. A. Router attached to this network B. The router interface has a local IP address C. A system administrator manually enters static routes directly into the configuration D. Learned by exchanging routing information E. Used when no explicit route to a destination is found https://www.learncisco.net/courses/icnd-2/troubleshooting-basic-connectivity/identification-of-the-path.html You can use the Cisco IOS ”copy” command to move configurations from one component or device to another. Which of the following commands will delete the configuration in the NVRAM? A. erase startup-config B. copy tftp running-config C. copy running-config tftp D. copy running-config startup-config https://www.learncisco.net/courses/icnd-1/network-environment-management/managing-devices.html In Software-Defined Access (SDA), which of the answers are part of the overlay data plane? A. LISP B. GRE C. OSPF D. VXLAN Which command is used to set an inactivity timer for the vty lines on your Cisco IOS switch? A. transport input telnet B. service password-encryption C. no login D. enable secret E. privileged F. no exec G. exec-timeout When a wildcard mask is presented in binary, what do the zeros (0) indicate? A. The network portion of the wildcard mask B. The host portion of the wildcard mask C. Ignore the corresponding bit in the IP address D. Match the corresponding bit in the IP address E. Match the corresponding bit in the subnet mask You have a network address of 172.16.0.0/22, which equals a subnet mask of 255.255.252.0. Determine the block size of this subnet. A. 6 B. 8 C. 2 D. 16 E. 4 https://www.learncisco.net/courses/icnd-1/lan-connections/network-addressing-scheme.html What are the correct pinouts for a crossover cable? (Choose two) A. Pin 2 to pin 3 B. Pin 1 to pin 3 C. Pin 1 to pin 6 D. Pin 2 to pin 6 E. Pin 4 to pin 8 What is the benefit of using a leased line between two offices for connectivity? A. Reduced Delay and Jitter B. Reduced Cost C. Intranet Reduction in Traffic D. Internet Control Which cloud service model provides access to an application that is built, monitored, and offered by the cloud provider? A. TaaS B. IaaS C. PaaS D. SaaS Of the figures shown, which depicts an accurate Clos Architecture? A. Topology A B. Topology B C. Topology C D. Topology D From the following options, what are the required REST API attributes? (Choose two) A. JSON-formatted data B. Unlayered systems C. Layered systems D. Client-server architecture Refer to the exhibit. All switch ports are assigned to the correct VLANs, but none of the hosts connected to SwitchA can communicate with hosts in the same VLAN connected to SwitchB. Based on the output shown, what is the most likely problem? A. The access link needs to be configured in multiple VLANs. B. The link between the switches is configured in the wrong VLAN. C. The link between the switches needs to be configured as a trunk. D. VTP is not configured to carry VLAN information between the switches. E. Switch IP addresses must be configured in order for traffic to be forwarded between the switches. Per the command output, with how many routers is router R9 full adjacent over its Gi0/0 interface? A. 7 B. 10 C. 5 D. 2 Which of the following are required attributes of a REST-based API? (Choose two) A. Uses HTTP B. Objects noted as to whether they can be cached C. Classful operation D. Client/server architecture For what two purposes does the Ethernet protocol use physical addresses? (Choose two) A. to uniquely identify devices at Layer 2 B. to allow communication with devices on a different network C. to differentiate a Layer 2 frame from a Layer 3 packet D. to establish a priority system to determine which device gets to transmit first E. to allow communication between different devices on the same network F. to allow detection of a remote device when its physical address is unknown https://www.learncisco.net/courses/icnd-1/ethernet-lans/packet-delivery-process.html You need to verify the various file systems that are available on your Cisco IOS router. Which command can you use to accomplish this? A. show ram B. show nvram C. show flash D. show control-plane host open-ports E. show file systems If you want to be alerted when a device configuration differs from the intended configuration, what should you implement? A. Version control B. Centralized configuration C. Configuration drift D. Configuration monitoring A Cisco Catalyst switch connects to what should be individual user PCs. Each port has the same port security configuration, configured as follows: interface range gigabitethernet 0/1 - 24 switchport mode access switchport port-security switchport port-security mac-address sticky Which of the following answers describe the result of the port security configuration created with these commands? (Choose two) A. Prevents unknown devices with unknown MAC addresses from sending data through the switch ports. B. If a user connects a switch to the cable, prevents multiple devices from sending data through the port. C. Will allow any one device to connect to each port, and will save that device’s MAC address into the startup-config D. Will allow any one device to connect to each port, but will not save that device’s MAC address into the startup-config How can you solve congestion issues from multiple links aggregating on a switch without scaling issues? A. Increase the uplink speed B. Decrease the uplink speed C. Enable loop-prevention mechanisms D. Bundle multiple links together with EtherChannel How are PDUs handled during the peer-communication process? (Choose two) A. The Internet layer encapsulates data and attaches a header to create a PDU known as a frame B. Header information within a PDU is required and can include information such as source and destination logical addressing C. The link layer provides a service to the network layer by encapsulating the network-layer packet into a PDU called a segment D. The application layer protocol begins the process by delivering PDUs to the transport layer https://www.learncisco.net/courses/icnd-1/building-a-network/tcpip-internet-layer.html What are the VLAN design considerations? (Choose four) A. Both ends of an 802.1Q trunk link require matching native VLANs B. The native VLAN should be changed from VLAN 1 C. The maximum number of VLANs is 1001 D. DTP manages trunk negotiations between Cisco switches E. VLAN 0 is the factory default Ethernet VLAN F. The Cisco switch IP address should be in the management VLAN https://www.learncisco.net/courses/icnd-1/medium-size-switched-network-construction/vlans-and-trunk.html __________ means that the QoS tool changes one or more header fields, setting a value in the header. A. Marking B. Classifying C. Insertion D. Qualifying Refer to the exhibit; in which area would R1’s Gi0/0 interface be placed? A. 5 B. 6 C. 10 D. 11 Which DSCP Assured Forwarding value provides the worst drop and worst queue performance? A. AF41 B. AF43 C. AF11 D. AF13 Which statement about VLAN operation on Cisco Catalyst switches is true? A. When a packet is received from an 802.1Q trunk, the VLAN ID can be determined from the source MAC address and the MAC address table. B. Unknown unicast frames are retransmitted only to the ports that belong to the same VLAN. C. Broadcast and multicast frames are retransmitted to ports that are configured on different VLAN. D. Ports between switches should be configured in access mode so that VLANs can span across the ports. https://www.learncisco.net/courses/icnd-1/ethernet-lans/developing-design-for-layer-2.html

Our Recommended Premium CCNA Training Resources

These are the best CCNA training resources online:

Click Here to get the Cisco CCNA Gold Bootcamp, the most comprehensive and highest rated CCNA course online with a 4.8 star rating from over 30,000 public reviews. I recommend this as your primary study source to learn all the topics on the exam.

Want to take your practice tests to the next level? AlphaPrep’s purpose-built Cisco test engine has the largest question bank, adaptive questions, and advanced reporting which tells you exactly when you’re ready to pass the real exam. Click here for your free trial.

The CCNA 200-301 is for the Cisco Certified Network Associate (CCNA) Implementing and Administering Cisco Solutions exam. You can use the practice test to check your knowledge and improve your understanding in preparation for the Cisco CCNA certification exam.

The Cisco CCNA 200-301 practice exam tests include questions to test your knowledge and skills related to Cisco networking fundamentals, which helps you pass the actual exam.

The Cisco CCNA exam objectives include Cisco network fundamentals on routers, switches, IP addresses, etc., network access, IP connectivity such as static and dynamic routing protocol, IP services, network security fundamentals, and automation and programmability.

Cisco CCNA 200-301 Practice Test

Complete this form to get your score report

Our Recommended Premium CCNA Training Resources