Cisco CCNA 200-301 Practice Test

Cisco Practice Tests

Question 1 / 55 - Mode : Exam
Which protocol provides encryption only? A. TLS VPN B. GRE VPN C. Connect VPN D. IPsec VPN Which is true in a spine-leaf architecture? (Choose two) A. Each leaf switch must connect to every spine switch. B. Each leaf switch must connect to one spine switch. C. Each spine switch must connect to every leaf switch. D. Each spine switch must connect to one leaf switch. You want to create an access list on R2 to permit traffic from VLAN 10 to access the Internet using HTTP. VLAN 10 has been configured to use the 10.1.1.0/26 subnet. Which commands can you use? (Choose three) A. ip access-list WEB_TRAFFIC B. permit tcp 10.1.1.0 0.0.0.63 any eq 80 C. access-group WEB_TRAFFIC out D. permit tcp 10.1.1.64 0.0.0.63 any eq 80 E. permit tcp 10.1.1.0 0.0.0.31 any eq 80 Which of the following QoS marking fields could remain with a packet while being sent through four different routers, over different LAN and WAN links? (Choose two) A. CoS B. IPP C. DSCP D. MPLS EXP You have configured one side of your EtherChannel as passive. What mode should you use on the other side? A. Desirable B. On C. Auto D. Active Which statements describe the benefits of using external authentication for larger networks? (Choose two) A. It requires less administrative effort than local authentication B. It enables the use of Terminal Access Controller Access Control System+, or TACACS+ C. It only allows Secure Shell, or SSH, connections D. It does not require the configuration of a default gateway https://www.learncisco.net/courses/icnd-1/lan-connections/cisco-router-security.html Which command is used to verify your OSPFv3 neighbor adjacencies? A. show ospf neighbor B. show ipv6 brief C. show ipv6 ospf D. show ipv6 ospf neighbor What does a 2900 ISR do if the POST is successful during start up, but there is no configuration file to load? A. It shuts down B. It creates a configuration file with default settings and loads user EXEC mode C. It initiates the system configuration dialog D. It reboots E. It enters ROMMON mode Which two benefits are provided by creating VLANs? (Choose two) A. added security B. dedicated bandwidth C. provides segmentation D. allows switches to route traffic between subinterfaces E. contains collisions https://www.learncisco.net/courses/ccna/part-5-virtual-lans-vlans/vlans-review.html Identify the command used to show the status of a specific interface. A. show interfaces description B. show interfaces type module/slot/port C. show interfaces hardware D. show interfaces load https://www.learncisco.net/courses/icnd-1/network-environment-management/neighbors-on-the-network.html Which command is used to enable LLDP globally on a Cisco IOS ISR? A. lldp run B. lldp enable C. lldp transmit D. cdp run E. cdp enable Which of the following reserved IPv4 addresses uses the highest address in the network range? A. Local broadcast address B. Loopback address C. Directed broadcast address D. Network address E. All zeros address https://www.learncisco.net/courses/ccna/part-2-ip-addressing-and-subnetting-nat/network-addressing.html An engineer connects to Router R1 and issues a show ip ospf neighbor command. The status of neighbor 2.2.2.2 lists FULL/BDR. What does the BDR mean? A. R1 is an Area Border Router. B. R1 is a backup designated router. C. Router 2.2.2.2 is an Area Border Router. D. Router 2.2.2.2 is a backup designated router. Of the figures shown, which depicts an accurate Clos Architecture? A. Topology A B. Topology B C. Topology C D. Topology D Refer to the topology shown in the exhibit. Which ports will be STP designated ports if all the links are operating at the same bandwidth? (Choose three) A. Switch A - Fa0/0 B. Switch A - Fa0/1 C. Switch B - Fa0/0 D. Switch B - Fa0/1 E. Switch C - Fa0/0 F. Switch C - Fa0/1 What is the name of the protocol that is used by IEEE 802.1x devices to communicate with the authenticator and authentication server? A. EAP B. EAPoL C. RADIUS D. TACACS+ Which code represents a route inside an area in which it belongs? A. IS - ISIS Interarea B. OI - OSPF Inter C. DCE - Destination D. O - OSPF Intra You have an ACL entry that has the address of 192.168.101.0 and the wildcard mask of 0.0.0.255. What is the range of IPv4 addresses that will be affected by this ACL? A. 192.168.101.100 through 192.168.101.200 B. 192.168.101.200 through 192.168.101.255 C. 192.168.101.0 through 192.168.101.100 D. 192.168.101.0 through 192.168.101.255 E. 192.168.101.0 through 0.0.0.255 In the virtualization world, the ___________ manages and allocates the host hardware for each VM. A. Host controller B. Hyperthreader C. Hypervisor D. Host service Which of the following cloud services is most likely to be used for software development? A. IaaS B. PaaS C. SaaS D. SLBaaS In an Ethernet network, under what two scenarios can devices transmit? (Choose two) A. when they receive a special token B. when there is a carrier C. when they detect no other devices are sending D. when the medium is idle E. when the server grants access https://www.learncisco.net/courses/icnd-1/building-a-network/ethernet-protocol.html What is the field that is used on modern systems that allows an IP packet to be marked with a specific QoS value? A. EXP B. CoS C. DSCP D. Traffic Class Which of the following is required when configuring port security with sticky learning? A. Setting the maximum number of allowed MAC addresses on the interface with the switchport port-security maximum interface subcommand B. Enabling port security with the switchport port-security interface subcommand C. Defining the specific allowed MAC addresses using the switchport port-security mac-address interface subcommand D. All the other answers list required commands A Cisco Catalyst switch connects to what should be individual user PCs. Each port has the same port security configuration, configured as follows: interface range gigabitethernet 0/1 - 24 switchport mode access switchport port-security switchport port-security mac-address sticky Which of the following answers describe the result of the port security configuration created with these commands? (Choose two) A. Prevents unknown devices with unknown MAC addresses from sending data through the switch ports. B. If a user connects a switch to the cable, prevents multiple devices from sending data through the port. C. Will allow any one device to connect to each port, and will save that device’s MAC address into the startup-config D. Will allow any one device to connect to each port, but will not save that device’s MAC address into the startup-config Regarding lightweight AP modes, which one of the following is true? A. An AP can operate in multiple modes at the same time. B. An AP only has one possible mode of operation. C. The Run mode is the default mode. D. The SE-Connect mode is used for spectrum analysis. Based on the network shown in the graphic. Which option contains both the potential networking problem and the protocol or setting that should be used to prevent the problem? A. routing loops, hold down timers B. switching loops, split horizon C. routing loops, split horizon D. switching loops, VTP E. routing loops, STP F. switching loops, STP Connections can be verified using a variety of troubleshooting commands. Which of the following commands is used to discover the routes that packets take when traveling to their destination? A. netstat B. tracert C. ping D. nslookup https://www.learncisco.net/courses/icnd-1/lan-connections/packet-delivery-process-at-l3.html What is the name of the Cisco product that offers a number of rack-mountable server configurations intended to be used in data centers? A. ASA B. KVM C. CRC D. UCS In what security zone are the public web servers located? A. DMZ B. Inside C. Outside D. Campus Which of the following commands globally enables the BPDU guard feature? A. spanning-tree portfast default B. spanning-tree portfast C. spanning-tree bpduguard enable D. spanning-tree portfast bpduguard default https://www.learncisco.net/courses/icnd-1/medium-size-switched-network-construction/performance-with-spanning-tree.html Which end-to-end connectivity troubleshooting tool will you use to test the IP connectivity between two hosts? A. Ping B. Telnet C. Address Resolution Protocol, or ARP D. Traceroute https://www.learncisco.net/courses/icnd-2/troubleshooting-basic-connectivity/troubleshooting-connectivity.html How can you solve congestion issues from multiple links aggregating on a switch without scaling issues? A. Increase the uplink speed B. Decrease the uplink speed C. Enable loop-prevention mechanisms D. Bundle multiple links together with EtherChannel Given the output from a working OSPF router, as seen in the exhibit, how many neighboring routers exist? B. 1 C. 2 D. 3 E. More than 3 What command is used to configure IPv6 static route? A. ipv6 route ::/0 outgoing interface ipv6 next hop B. ipv6 route ipv6 network/ipv6 mask ipv6 next hop C. ipv6 route ipv6 network/ipv6 mask outgoing interface ipv6 next hop D. ipv6 route ::/0 ipv6 next hop https://www.learncisco.net/courses/icnd-1/introducing-ipv6/ipv6-connectivity.html Which of the following OSPF packet types ensures reliable transport and exchange of information? A. link-state acknowledgement, or LSAck B. link-state update, or LSU C. link-state request, or LSR D. database description package, or DBD https://www.learncisco.net/courses/icnd-2/an-overview-of-ospf/link-state-databases.html Robust wireless encryption is based on which of the following algorithms? A. WEP B. AES C. DES D. IPsec VLAN 10 has a priority of 4096 and VLAN 20 has a priority of 16384. VLAN 20 has a lower MAC address than VLAN 10. What would be the likely result of running the “spanning-tree vlan 20 root primary“ command for VLAN 20? A. VLAN 10 would have a higher priority B. VLAN 20 would have a higher priority C. VLAN 20 would become the root bridge D. VLAN 10 would become the root bridge What are the considerations when using First Hop Redundancy Protocols? (Choose two) A. They must exist in their own VLAN B. They allow you to implement multiple physical routers in your environment, but have them appear as a single virtual router to your end stations C. They require additional configuration for the end user D. The transition from one forwarding router to another is transparent to the end devices In Software-Defined Access (SDA), which of the answers are part of the overlay data plane? A. LISP B. GRE C. OSPF D. VXLAN The show port-security interface f0/1 command lists a port status of Secure-shutdown. Which of the following answer must be true about this interface at this time? A. The show interface status command lists the interface status as connected. B. The show interface status command lists the interface status as err-disabled. C. The show port-security interface command could list a mode of shutdown or restrict, but not protect. D. The show port-security interface command could list a violation counter value of 10. Which RFC defines the private IPv4 address ranges? A. 2784 B. 4443 C. 1985 D. 7868 E. 1918 F. 2328 G. 792 Review the topology diagram. Network 10.123.0.0/24 is the backbone area. Network 10.12.0.0/24 is area 1, and network 10.34.0.0/29 is in area 2. Which of the following are true? (Choose three) A. R1 is a backbone router. B. R1 is an ABR. C. R1 is an internal router. D. R3 would see the OSPF network of 10.12.0.0/24 as an intra-area route. E. R1 and R3 would have the same LSA information about the backbone area. Which of the following are required attributes of a REST-based API? (Choose two) A. Uses HTTP B. Objects noted as to whether they can be cached C. Classful operation D. Client/server architecture What is the name of the firewall feature that, when used, can maintain a historical database of each connection through a device: Where it was sourced, destined, and which protocol and protocol port it was using? A. Stateless Inspection B. Stateful Inspection C. Network Protocol Analysis D. Protocol State Analysis What will happen if a private IP address is assigned to a public interface connected to an ISP? A. Addresses in a private range will be not be routed on the Internet backbone. B. Only the ISP router will have the capability to access the public network. C. The NAT process will be used to translate this address to a valid IP address. D. A conflict of IP addresses happens, because other public routers can use the same range. https://www.learncisco.net/courses/icnd-1/building-a-network/tcpip-internet-layer.html How can be provided secure access to a privileged EXEC mode? A. Limit access to virtual type terminal, or vty, lines B. Assign a password and privilege level C. Block Telnet access https://www.learncisco.net/courses/icnd-1/lan-connections/cisco-router-security.html You are implementing a VLSM network. You are using the Class A network of 10.0.0.0/8 and need to create networks that support 254 hosts that will be used for each LAN. The tenth network that was created will be used for addressing all the point-to-point links between routers at HQ, all the point-to-point WAN links, and any point-to-point links in the branch offices. What is the subnet ID of the second point-to-point network created? A. 10.0.9.8/30 B. 10.0.9.2/30 C. 10.0.9.6./30 D. 10.0.9.4/30 E. 10.0.10.4/30 F. 10.0.10.2/30 Which IOS command always displays OSPF hello timer settings? A. show ip protocols B. show ip route C. show ip ospf interface D. show ip ospf neighbor E. debug ip ospf events __________ means that the QoS tool changes one or more header fields, setting a value in the header. A. Marking B. Classifying C. Insertion D. Qualifying What are the functions of the standby router when there is L3 redundancy? (Choose two) A. Sends out hello messages B. Knows the IP address of the virtual router C. Active forwarding of packets for the virtual router is assumed D. Default gateway ARP requests are responded to with the virtual router MAC E. Listens for periodic hello messages F. If the other router is not heard from, it assumes active forwarding of packets https://www.learncisco.net/courses/icnd-2/etherchannel-and-l3-redundancy/gateway-redundancy.html When planning a greenfield SDA design, what traditional LAN design points should be included? (Choose two) A. The number of switchports needed in each switch B. The required speed of the switchports C. A security firewall to properly segment traffic D. The Spanning Tree mode of operation to use You are upgrading the Cisco IOS on your Catalyst switch. While browsing the available downloads on Cisco's website, you notice that you need the model of the switch to obtain the correct IOS. Which command can you issue on your IOS switch to identify the model? A. show running-config B. show flash C. show startup-config D. show platform nvram E. show version F. show processes Which physical layer media are used today for connecting network devices (switches and routers) together in a LAN? (Choose two) A. Coaxial B. Twisted copper pair C. Fiber optic D. Wireless Which public cloud WAN connection options do not offer the ability to have reliable QoS? (Choose two) A. Internet B. Internet VPN C. MPLS VPN D. Ethernet VPN E. Intercloud With IEEE 802.1x, which role does a LAN switch typically play? A. Authentication server B. Supplicant C. Translator D. Authenticator

Our Recommended Premium CCNA Training Resources

These are the best CCNA training resources online:

Click Here to get the Cisco CCNA Gold Bootcamp, the most comprehensive and highest rated CCNA course online with a 4.8 star rating from over 30,000 public reviews. I recommend this as your primary study source to learn all the topics on the exam.

Want to take your practice tests to the next level? AlphaPrep’s purpose-built Cisco test engine has the largest question bank, adaptive questions, and advanced reporting which tells you exactly when you’re ready to pass the real exam. Click here for your free trial.

The CCNA 200-301 is for the Cisco Certified Network Associate (CCNA) Implementing and Administering Cisco Solutions exam. You can use the practice test to check your knowledge and improve your understanding in preparation for the Cisco CCNA certification exam.

The Cisco CCNA 200-301 practice exam tests include questions to test your knowledge and skills related to Cisco networking fundamentals, which helps you pass the actual exam.

The Cisco CCNA exam objectives include Cisco network fundamentals on routers, switches, IP addresses, etc., network access, IP connectivity such as static and dynamic routing protocol, IP services, network security fundamentals, and automation and programmability.

Cisco CCNA 200-301 Practice Test

Complete this form to get your score report

Our Recommended Premium CCNA Training Resources