Cisco CCNA 200-301 Practice Test

Cisco Practice Tests

Question 1 / 55 - Mode : Exam
What are the possible consequences of an STP failure? (Choose two) A. Only the users that are directly connected to the switch will be affected B. Every port will transition to a blocking state C. The load on all links in the switched LAN quickly starts increasing D. Due to very high load for the CPU, the switch becomes unreachable In a reflection attack, the source IP address in the attack packets is spoofed so that it contains which one of the following entities? A. The address of the attacker B. The address of the reflector C. The address of the victim D. The address of the router You have verified the interface status with the “show interface“ command. What other steps should you consider when troubleshooting the physical connectivity between devices? (Choose three) A. Make sure you have the correct type of cable for the connection you are making B. Try replacing a suspect cable with a known good cable C. Restart the router D. Ensure the interface is enabled E. Upgrade the router\'s IOS What causes speed-related port access issues? (Choose two) A. Both ends of the segment are set to autonegotiate speed B. The distance between the first and last host on the segment is too long C. The duplex setting on both ends is set to full duplex D. One end is set to autonegotiate and the other to high speed https://www.learncisco.net/courses/icnd-1/ethernet-lans/troubleshooting-switch-issues.html What is the calculator of the total cost of a particular path referred to? A. Checksum B. Metric C. Bandwidth D. Length A user is experiencing a loss of end-to-end connectivity in an IPv4 network. You have verified that there is no physical connectivity issue. Logically, what should you check next? A. Whether the current path is undesirable B. Whether there is a physical connectivity issue C. Whether the name resolutions are correct D. Whether an access control list, or ACL is blocking traffic https://www.learncisco.net/courses/icnd-2/troubleshooting-basic-connectivity/troubleshooting-connectivity.html enable secret [password] is hashed using the _______ algorithm. A. MD5 B. AH C. PSK D. ESP E. WPA2 You can use the Cisco IOS ”copy” command to move configurations from one component or device to another. Which of the following commands will upload the current operating configuration and save it to a TFTP server? A. erase startup-config B. copy tftp running-config C. copy running-config tftp D. copy running-config startup-config https://www.learncisco.net/courses/icnd-1/network-environment-management/managing-devices.html Network device addresses use binary system to define their location on the network. How do the decimal and binary number systems work? (Choose three) A. Mathematics is based on the binary system B. Computers are based on the decimal system C. When performing powers of 2 calculations, the least significant bit is equal to 2^1 D. In the decimal system, the digits are 0,1, 2, 3, 4, 5, 6, 7, 8, and 9 E. Powers of 2 provide the basis for binary values F. The binary system uses only the digits 0 and 1 Which of these are QoS requirements when designing a Cisco TelePresence video network? (Choose two) A. One-way delay < 200 ms B. Round-trip delay < 200 ms C. Loss < 5% D. Loss < 0.05% E. Jitter < 100 ms F. Jitter < 50 ms What should be checked when troubleshooting IPv6 end-to-end connectivity? (Choose three) A. Incorrect default gateways B. Physical location of devices C. Physical connection issues D. Blocked traffic from ACLs You are configuring port security on a Catalyst IOS switch. You need to choose a violation mode that will deny frames that are in violation of the port security settings while still allowing frames that are not in violation. In addition, syslog messages need to be generated and the port security violation counter must increase each time a violation occurs. Which port security violation mode should you choose? A. Err-disable B. Protect C. Shutdown D. Disable E. Restrict __________ means that the QoS tool changes one or more header fields, setting a value in the header. A. Marking B. Classifying C. Insertion D. Qualifying Using the exhibit as a reference, what is a valid key? A. ”lastUpdateTime”: 1572317520439 B. ”CSR1000V” C. ”role” D. ”platformId”: The CLI is used to enter commands. Identify the command entry functions of the Cisco CLI. (Choose two) A. Pressing the ENTER key instructs the device to execute a command B. The two primary EXEC modes are the basic mode and advanced mode C. Command modes have distinctive prompts D. Command operations are consistent across different internetworking devices https://www.learncisco.net/courses/ccna/part-4-cisco-ios/command-line-interface.html Which is true in a spine-leaf architecture? (Choose two) A. Each leaf switch must connect to every spine switch. B. Each leaf switch must connect to one spine switch. C. Each spine switch must connect to every leaf switch. D. Each spine switch must connect to one leaf switch. What is the name of the firewall feature that, when used, can maintain a historical database of each connection through a device: Where it was sourced, destined, and which protocol and protocol port it was using? A. Stateless Inspection B. Stateful Inspection C. Network Protocol Analysis D. Protocol State Analysis Which statements best describe the role of a router? (Choose two) A. Routers are used to connect hosts that are in the same local area network B. Routers use a routing table to forward packets C. Routers are used to connect hosts that are in different local area networks D. Routers use a MAC address table to forward packets You need to verify the MAC address of Ethernet0/0 on your Cisco IOS ISR. Which command will display the MAC address? A. show interfaces Ethernet0/0 B. show mac-address table C. show ip route D. show version E. show ip interface brief F. show running-config What commands would you need to configure to enable DHCP Snooping so that PC4 couldn’t become a rogue DHCP server? A. Configure the following on SW 2: ip dhcp snooping, ip dhcp snooping vlan 10, int gi0/12, ip dhcp snooping trust B. Configure the following on SW 1: ip dhcp snooping, ip dhcp snooping vlan 10, int gi0/24, ip dhcp snooping trust C. Configure the following on SW 2: ip dhcp snooping, ip dhcp snooping vlan 10, int gi0/24, ip dhcp snooping trust D. Configure the following on SW 2: ip dhcp snooping, ip dhcp snooping vlan 20, int gi0/24, ip dhcp snooping trust E. Configure the following on SW 2: ip dhcp snooping, ip dhcp snooping vlan 20, int gi0/12, ip dhcp snooping trust F. Configure the following on SW 1: ip dhcp snooping, ip dhcp snooping vlan 20, int gi0/24, ip dhcp snooping trust Which DSCP Assured Forwarding value provides the worst drop and worst queue performance? A. AF41 B. AF43 C. AF11 D. AF13 What is the multicast address for hello packets by default on OSPFv3? A. 224.0.0.6 B. FF02::A C. FF02::5 D. 224.0.0.5 Which of the following commands would you use to enable EIGRP only on those interfaces with an IP address from 10.1.1.0 through 10.1.1.63? A. network 10.1.1.0 0.0.0.63 B. network 10.1.1.0/63 C. router eigrp 10.1.1.0 0.0.0.63 D. network 10.0.0.0 0.0.0.255 A host with an IP address of 192.168.5.3 has an empty cache. It needs to send a packet to another host with an IP address of 192.168.6.4. The default gateway has an IP address of 192.168.5.1. What action is required for the frame header to be filled with the correct MAC address? A. The host with IP address 192.168.5.3 must send an ARP request for the MAC address ofthe host with IP address 192.168.6.4 B. The default gateway must send an Address Resolution Protocol, or ARP, request for the MAC address of the host with the 192.168.5.3 IP address C. The default gateway must send an ARP request for the MAC address of the host with the IP address of 192.168.6.4 D. The host with the IP address of 192.168.5.3 must send an ARP request for the MAC address of the default gateway https://www.learncisco.net/courses/icnd-1/lan-connections/packet-delivery-process-at-l3.html A Cisco Catalyst switch connects to what should be individual user PCs. Each port has the same port security configuration, configured as follows: interface range gigabitethernet 0/1 - 24 switchport mode access switchport port-security switchport port-security mac-address sticky Which of the following answers describe the result of the port security configuration created with these commands? (Choose two) A. Prevents unknown devices with unknown MAC addresses from sending data through the switch ports. B. If a user connects a switch to the cable, prevents multiple devices from sending data through the port. C. Will allow any one device to connect to each port, and will save that device’s MAC address into the startup-config D. Will allow any one device to connect to each port, but will not save that device’s MAC address into the startup-config Which code represents a route inside an area in which it belongs? A. IS - ISIS Interarea B. OI - OSPF Inter C. DCE - Destination D. O - OSPF Intra What equipment is required when connecting to a Cisco device through the console port? (Choose two) A. A monitor connected to the Cisco device by way of a USB cable hub B. A PC with software such as PuTTY C. A USB-to-RS232-compatible serial port adapter D. A DB-9 to DB-9 cable connected to the console port of the device https://www.learncisco.net/courses/ccna/part-4-cisco-ios/user-interface.html Which command is used to display the open ports on a router so that you can determine which services should be disabled? A. show ports open host B. show control-plane host open-ports C. show flash D. show file system Which command is used to apply an ACL to an interface? A. access-group B. ip access-group C. ip access-list D. ip access-class E. access-class F. access-list What functionality is provided by a routing table? (Choose two) A. It identifies how to reach known destinations B. It ensures packets are dropped if there is no entry for a destination C. It lists all known destinations D. It needs to be manually configured https://www.learncisco.net/courses/icnd-1/lan-connections/functions-of-routing.html Which Cisco IOS command is used to advertise a default route into an OSPF domain regardless of whether a default static route is configured? A. default-information originate B. default-information originate always C. default-information originate permanent D. default-information originate no-check Looking at the exhibit, what key:value pair option has a value that is numeric in nature? A. ”upTime”: ”45 days, 13:36:14.80”, B. ”lastUpdated”: ”2019-10-29 02:52:00”, C. ”managementIpAddress”: ”10.230.1.1”, D. ”lastUpdateTime”: 1572317520439 What are the VLAN design considerations? (Choose four) A. Both ends of an 802.1Q trunk link require matching native VLANs B. The native VLAN should be changed from VLAN 1 C. The maximum number of VLANs is 1001 D. DTP manages trunk negotiations between Cisco switches E. VLAN 0 is the factory default Ethernet VLAN F. The Cisco switch IP address should be in the management VLAN https://www.learncisco.net/courses/icnd-1/medium-size-switched-network-construction/vlans-and-trunk.html An engineer connects to Router R1 and issues a show ip ospf neighbor command. The status of neighbor 2.2.2.2 lists FULL/BDR. What does the BDR mean? A. R1 is an Area Border Router. B. R1 is a backup designated router. C. Router 2.2.2.2 is an Area Border Router. D. Router 2.2.2.2 is a backup designated router. Which option can you choose for saving money while securing your WAN connections? A. Enterprise Managed VPN B. Service Provider VPN C. SSL VPN D. Access Control VPN In the virtualization world, the ___________ manages and allocates the host hardware for each VM. A. Host controller B. Hyperthreader C. Hypervisor D. Host service The Wi-Fi Alliance offers which of the following certifications for wireless devices that correctly implement security standards? A. WEP B. WPA2 C. 802.11 D. AES What is the field that is used on modern systems that allows an IP packet to be marked with a specific QoS value? A. EXP B. CoS C. DSCP D. Traffic Class If a lightweight AP provides at least one BSS for wireless clients, which one of the following modes does it use? A. Local B. Normal C. Monitor D. Client Which cloud service is owned and operated by a third party and allows people from a variety of different companies to request and use its resources? A. Hybrid cloud B. Internet cloud C. Private cloud D. Public cloud In Software-Defined Access (SDA), which of the answers are part of the overlay data plane? A. LISP B. GRE C. OSPF D. VXLAN How many default vty lines exist on a Cisco IOS router? A. 20 B. 1 C. 5 D. 10 E. 15 Refer to the exhibit. Based on the information given, which switch will be elected root bridge and why? A. Switch A, because it has the lowest MAC address B. Switch A, because it is the most centrally located switch C. Switch B, because it has the highest MAC address D. Switch C, because it is the most centrally located switch E. Switch C, because it has the lowest priority F. Switch D, because it has the highest priority Identify the shortest version of 2024:0000:140F:0000:0000:08C0:875A:140B. A. 2024:140F::8C0:875A:140B B. 2024::140F::8C0:875A:140B C. 2024:0:140F::8C0:875A:140B D. 2024:0:140F::08C0:875A:140B https://www.learncisco.net/courses/icnd-1/introducing-ipv6/the-ipv6-address.html Suppose you would like to select a method to protect the privacy and integrity of wireless data. Which one of the following methods should you avoid because it has been deprecated? A. TKIP B. CCMP C. GCMP D. EAP Per the command output, with how many routers is router R9 full adjacent over its Gi0/0 interface? A. 7 B. 10 C. 5 D. 2 Which of the following four TCP/IP layers determines the best path through the network? A. Network Access B. Transport C. Internet D. Application https://www.learncisco.net/courses/icnd-1/building-a-network/host-to-host-communications.html In a split-MAC architecture, real-time functions such as encryption are handled in which of the following network entities? A. An access layer switch B. A distribution layer switch C. A wireless LAN controller D. A lightweight AP Review the following router configuration and identify the correct statements regarding telnet access to the router: Router(config)#access-list 1 deny host 10.1.20.1 Router(config)#access-list 1 deny host 10.1.20.2 Router(config)#access-list 1 permit host 10.1.10.1 Router(config)#access-list 1 permit host 10.1.10.2 Router(config)#access-list 1 permit 10.1.20.0 0.0.0.255 Router(config)#line vty 0 4 Router(config-line)#access-class 1 in (Choose two) A. Telnet access from all hosts in the 10.1.20.0/24 network is denied except 10.1.20.1 and 10.1.20.2 B. Telnet access from hosts 10.1.20.1 and 10.1.20.2 is allowed C. Telnet access from hosts 10.1.10.1 and 10.1.10.2 is allowed D. Telnet access from all hosts in the 10.1.10.0/24 network is allowed E. Telnet access from all hosts in the 10.1.20.0/24 network is allowed except 10.1.20.1 and 10.1.20.2 F. Telnet attempts that are denied will generate a syslog message Which statements correctly describe how ACLs function? (Choose two) A. There is an implicit deny all at the bottom of each ACL B. There is immediate execution upon a match C. The last entries in an ACL are processed first D. ACLs can be used only for filtering https://www.learncisco.net/courses/icnd-1/acls-and-nat/understanding-acls.html What is the name of the protocol that has been developed by the ONF that is used to communicate between an SDN controller and the network devices it controls? A. OpFlex B. OpenSDN C. SbControl D. OpenFlow Which of the following components contains the operating system? A. Interface B. ROM C. Flash D. RAM E. CPU F. NVRAM https://www.learncisco.net/courses/icnd-2/network-management/router-internal-components-overview.html Review the topology diagram. Network 10.123.0.0/24 is the backbone area. Network 10.12.0.0/24 is area 1, and network 10.34.0.0/29 is in area 2. Which of the following are true? (Choose three) A. R1 is a backbone router. B. R1 is an ABR. C. R1 is an internal router. D. R3 would see the OSPF network of 10.12.0.0/24 as an intra-area route. E. R1 and R3 would have the same LSA information about the backbone area. What is the best method of ensuring that your preferred switch is the root bridge? A. Allow the devices to always elect the best path without any special configuration B. Manually set the priority of each switch in your topology C. Manually set the IP configuration of the switches to modify the priority of each switch D. Use the default configuration and built-in macros Which of the following cloud services is most likely to be used for software development? A. IaaS B. PaaS C. SaaS D. SLBaaS

Our Recommended Premium CCNA Training Resources

These are the best CCNA training resources online:

Click Here to get the Cisco CCNA Gold Bootcamp, the most comprehensive and highest rated CCNA course online with a 4.8 star rating from over 30,000 public reviews. I recommend this as your primary study source to learn all the topics on the exam.

Want to take your practice tests to the next level? AlphaPrep’s purpose-built Cisco test engine has the largest question bank, adaptive questions, and advanced reporting which tells you exactly when you’re ready to pass the real exam. Click here for your free trial.

The CCNA 200-301 is for the Cisco Certified Network Associate (CCNA) Implementing and Administering Cisco Solutions exam. You can use the practice test to check your knowledge and improve your understanding in preparation for the Cisco CCNA certification exam.

The Cisco CCNA 200-301 practice exam tests include questions to test your knowledge and skills related to Cisco networking fundamentals, which helps you pass the actual exam.

The Cisco CCNA exam objectives include Cisco network fundamentals on routers, switches, IP addresses, etc., network access, IP connectivity such as static and dynamic routing protocol, IP services, network security fundamentals, and automation and programmability.

Cisco CCNA 200-301 Practice Test

Complete this form to get your score report

Our Recommended Premium CCNA Training Resources