{"id":11877,"date":"2026-09-14T12:48:21","date_gmt":"2026-09-14T12:48:21","guid":{"rendered":"https:\/\/www.examlabs.com\/certification\/?p=11877"},"modified":"2026-09-14T12:48:21","modified_gmt":"2026-09-14T12:48:21","slug":"cisco-ccna-200-301-practice-test-questions-and-exam-dumps-part-9-q161-180","status":"publish","type":"post","link":"https:\/\/www.examlabs.com\/certification\/cisco-ccna-200-301-practice-test-questions-and-exam-dumps-part-9-q161-180\/","title":{"rendered":"Cisco CCNA 200-301 Practice Test Questions and Exam Dumps Part 9 Q161-180"},"content":{"rendered":"

View Full\u00a0Cisco 200-301 Exam Dumps<\/a>\u00a0and Practice Test Dumps.<\/b><\/h2>\n

 <\/p>\n

Question 161<\/b><\/h3>\n

Which IPv4 subnet mask provides 14 usable host addresses?<\/b><\/p>\n

    \n
  1. 255.255.255.248<\/span><\/li>\n
  2. 255.255.255.240<\/span><\/li>\n
  3. 255.255.255.224<\/span><\/li>\n
  4. 255.255.255.192<\/span><\/li>\n<\/ol>\n

    Correct Answer: 2<\/b><\/p>\n

    Explanation<\/b><\/p>\n

    The subnet mask 255.255.255.240 represents a \/28 prefix. A \/28 subnet contains 16 total IPv4 addresses. One address is reserved for the network address and another for the broadcast address, leaving 14 usable host addresses. A \/29 provides 6 usable addresses, \/27 provides 30, and \/26 provides 62. Therefore, 255.255.255.240 is the correct subnet mask for a network that requires 14 usable IPv4 host addresses.<\/span><\/p>\n

    Question 162<\/b><\/h3>\n

    Which command places a Cisco switch interface into trunk mode?<\/b><\/p>\n

      \n
    1. switchport mode access<\/span><\/li>\n
    2. switchport trunk native vlan 10<\/span><\/li>\n
    3. switchport mode trunk<\/span><\/li>\n
    4. switchport access vlan 10<\/span><\/li>\n<\/ol>\n

      Correct Answer: 3<\/b><\/p>\n

      Explanation<\/b><\/p>\n

      The <\/span>switchport mode trunk<\/span> command statically configures a Cisco switch interface to operate as an IEEE 802.1Q trunk. A trunk can carry traffic from multiple VLANs across a single physical connection. Additional commands can be used to configure the native VLAN and allowed VLAN list. <\/span>switchport mode access<\/span> configures an access port, while <\/span>switchport access vlan<\/span> assigns an access port to a VLAN. Therefore, <\/span>switchport mode trunk<\/span> is the correct command for configuring a trunk interface.<\/span><\/p>\n

      Question 163<\/b><\/h3>\n

      Which routing protocol uses cost as its primary metric?<\/b><\/p>\n

        \n
      1. OSPF<\/span><\/li>\n
      2. RIP<\/span><\/li>\n
      3. BGP<\/span><\/li>\n
      4. ARP<\/span><\/li>\n<\/ol>\n

        Correct Answer: 1<\/b><\/p>\n

        Explanation<\/b><\/p>\n

        OSPF uses cost as its primary routing metric. The cost is typically calculated from the reference bandwidth and the interface bandwidth, allowing OSPF to prefer paths with lower overall cost. Routers use these costs when running the Shortest Path First algorithm to determine the best paths through the topology. RIP uses hop count, while BGP uses path attributes for route selection. ARP is not a routing protocol. Therefore, OSPF is the protocol that primarily uses cost as its routing metric.<\/span><\/p>\n

        Question 164<\/b><\/h3>\n

        Which command displays the IPv6 addresses configured on Cisco interfaces in a concise format?<\/b><\/p>\n

          \n
        1. show ipv6 route<\/span><\/li>\n
        2. show ipv6 interface brief<\/span><\/li>\n
        3. show ip interface brief<\/span><\/li>\n
        4. show interfaces trunk<\/span><\/li>\n<\/ol>\n

          Correct Answer: 2<\/b><\/p>\n

          Explanation<\/b><\/p>\n

          The <\/span>show ipv6 interface brief<\/span> command provides a concise summary of IPv6-enabled interfaces and their configured IPv6 addresses. It is useful when administrators need to quickly verify interface addressing and operational status. The <\/span>show ipv6 route<\/span> command displays the IPv6 routing table, while <\/span>show ip interface brief<\/span> focuses on IPv4 information. <\/span>show interfaces trunk<\/span> is used to inspect Layer 2 trunking. Therefore, <\/span>show ipv6 interface brief<\/span> is the correct command for quickly reviewing IPv6 interface addresses.<\/span><\/p>\n

          Question 165<\/b><\/h3>\n

          Which technology allows multiple physical Ethernet links to operate as one logical link?<\/b><\/p>\n

            \n
          1. VLAN<\/span><\/li>\n
          2. EtherChannel<\/span><\/li>\n
          3. NAT<\/span><\/li>\n
          4. PortFast<\/span><\/li>\n<\/ol>\n

            Correct Answer: 2<\/b><\/p>\n

            Explanation<\/b><\/p>\n

            EtherChannel combines multiple physical Ethernet links into a single logical link. This provides increased bandwidth and redundancy while simplifying how the links are treated by Layer 2 protocols such as STP. EtherChannel can be negotiated using protocols such as LACP or, on Cisco devices, PAgP. VLANs provide logical segmentation, NAT translates IP addresses, and PortFast changes STP behavior on edge ports. Therefore, EtherChannel is the technology that allows multiple physical Ethernet connections to operate as one logical connection.<\/span><\/p>\n

            Question 166<\/b><\/h3>\n

            Which IPv4 address is from the APIPA or link-local address range?<\/b><\/p>\n

              \n
            1. 10.10.10.5<\/span><\/li>\n
            2. 169.254.25.10<\/span><\/li>\n
            3. 172.16.10.1<\/span><\/li>\n
            4. 192.168.1.10<\/span><\/li>\n<\/ol>\n

              Correct Answer: 2<\/b><\/p>\n

              Explanation<\/b><\/p>\n

              The address 169.254.25.10 belongs to the IPv4 link-local range 169.254.0.0\/16, commonly called APIPA. A host may automatically assign an address from this range when it is configured to use DHCP but cannot obtain a valid address from a DHCP server. APIPA addresses are intended for local-link communication and are not normally routed between networks. The other addresses are private IPv4 addresses from RFC 1918 ranges. Therefore, 169.254.25.10 is the correct example of an APIPA address.<\/span><\/p>\n

              Question 167<\/b><\/h3>\n

              Which security feature can inspect DHCP messages and create a binding table containing IP addresses and MAC addresses?<\/b><\/p>\n

                \n
              1. PortFast<\/span><\/li>\n
              2. DHCP Snooping<\/span><\/li>\n
              3. Root Guard<\/span><\/li>\n
              4. EtherChannel<\/span><\/li>\n<\/ol>\n

                Correct Answer: 2<\/b><\/p>\n

                Explanation<\/b><\/p>\n

                DHCP Snooping monitors DHCP traffic on a switch and can create a binding database containing information such as the client’s MAC address, assigned IP address, VLAN, and switch interface. This database can later support other security features, including Dynamic ARP Inspection and IP Source Guard. DHCP Snooping also distinguishes trusted from untrusted interfaces to help prevent rogue DHCP servers. PortFast and Root Guard are STP-related features, while EtherChannel combines physical links. Therefore, DHCP Snooping is the correct security feature.<\/span><\/p>\n

                Question 168<\/b><\/h3>\n

                Which command displays information about OSPF process configuration and routing protocol status?<\/b><\/p>\n

                  \n
                1. show ip ospf<\/span><\/li>\n
                2. show mac address-table<\/span><\/li>\n
                3. show vlan brief<\/span><\/li>\n
                4. show interfaces status<\/span><\/li>\n<\/ol>\n

                  Correct Answer: 1<\/b><\/p>\n

                  Explanation<\/b><\/p>\n

                  The <\/span>show ip ospf<\/span> command displays information about the OSPF process running on a Cisco router. Depending on the configuration, the output can include the router ID, areas, timers, SPF information, and other OSPF operational details. This command is useful for troubleshooting OSPF configuration and understanding how the routing process is operating. The other commands focus on MAC addresses, VLANs, and switch interface status. Therefore, <\/span>show ip ospf<\/span> is the appropriate command for viewing OSPF process information.<\/span><\/p>\n

                  Question 169<\/b><\/h3>\n

                  Which IPv6 multicast address represents all IPv6 routers on the local link?<\/b><\/p>\n

                    \n
                  1. FF02::1<\/span><\/li>\n
                  2. FF02::2<\/span><\/li>\n
                  3. FE80::1<\/span><\/li>\n
                  4. FF05::1<\/span><\/li>\n<\/ol>\n

                    Correct Answer: 2<\/b><\/p>\n

                    Explanation<\/b><\/p>\n

                    The IPv6 multicast address FF02::2 represents all IPv6 routers on the local link. IPv6 uses multicast groups for communication with specific groups of devices instead of relying on traditional broadcast traffic. FF02::1 represents all IPv6 nodes on the local link, while FF02::2 specifically identifies routers. FE80::1 is within the link-local unicast address space, and FF05::1 has a different multicast scope. Therefore, FF02::2 is the correct multicast address for all IPv6 routers on the local link.<\/span><\/p>\n

                    Question 170<\/b><\/h3>\n

                    Which command can be used to verify the operational status of a specific Cisco interface?<\/b><\/p>\n

                      \n
                    1. show interface GigabitEthernet0\/1<\/span><\/li>\n
                    2. show ip route<\/span><\/li>\n
                    3. show users<\/span><\/li>\n
                    4. show vlan<\/span><\/li>\n<\/ol>\n

                      Correct Answer: 1<\/b><\/p>\n

                      Explanation<\/b><\/p>\n

                      The <\/span>show interface GigabitEthernet0\/1<\/span> command displays detailed operational information for the specified interface. The output can include physical and line protocol status, bandwidth, duplex, speed, packet counters, errors, and other interface statistics. This makes the command useful for diagnosing physical connectivity and performance issues. <\/span>show ip route<\/span> displays routing information, <\/span>show users<\/span> lists active sessions, and <\/span>show vlan<\/span> provides VLAN information. Therefore, the interface-specific <\/span>show interface<\/span> command is appropriate for checking an individual interface.<\/span><\/p>\n

                      Question 171<\/b><\/h3>\n

                      Which protocol provides automatic time synchronization between network devices?<\/b><\/p>\n

                        \n
                      1. SNMP<\/span><\/li>\n
                      2. NTP<\/span><\/li>\n
                      3. Syslog<\/span><\/li>\n
                      4. DHCP<\/span><\/li>\n<\/ol>\n

                        Correct Answer: 2<\/b><\/p>\n

                        Explanation<\/b><\/p>\n

                        Network Time Protocol, or NTP, synchronizes clocks between network devices and reliable time sources. Accurate time is important for troubleshooting, security auditing, authentication, and correlating events across centralized logs. Cisco routers and switches can be configured to use NTP servers so that their timestamps remain consistent. SNMP is primarily used for monitoring, Syslog collects event messages, and DHCP provides network configuration. Therefore, NTP is the protocol specifically designed for automatic time synchronization between network devices.<\/span><\/p>\n

                        Question 172<\/b><\/h3>\n

                        Which type of ACL is generally placed closer to the destination because it provides detailed traffic filtering?<\/b><\/p>\n

                          \n
                        1. Standard ACL<\/span><\/li>\n
                        2. Extended ACL<\/span><\/li>\n
                        3. MAC table<\/span><\/li>\n
                        4. VLAN ACL only<\/span><\/li>\n<\/ol>\n

                          Correct Answer: 2<\/b><\/p>\n

                          Explanation<\/b><\/p>\n

                          Extended ACLs can evaluate source and destination IP addresses, protocols, and port numbers, allowing highly specific traffic filtering. A common design guideline is to place extended ACLs close to the source of unwanted traffic so that undesirable traffic can be stopped before consuming network resources. Standard ACLs are generally placed closer to the destination because they primarily evaluate source addresses and have less granular filtering capability. Therefore, among the options, an extended ACL is the type that provides detailed traffic filtering. Proper placement should always consider the specific security policy.<\/span><\/p>\n

                          Question 173<\/b><\/h3>\n

                          Which protocol is commonly used to assign IPv4 addresses dynamically to client devices?<\/b><\/p>\n

                            \n
                          1. DHCP<\/span><\/li>\n
                          2. OSPF<\/span><\/li>\n
                          3. BGP<\/span><\/li>\n
                          4. STP<\/span><\/li>\n<\/ol>\n

                            Correct Answer: 1<\/b><\/p>\n

                            Explanation<\/b><\/p>\n

                            Dynamic Host Configuration Protocol, or DHCP, automatically provides IPv4 configuration information to client devices. A DHCP server can assign an IP address, subnet mask, default gateway, DNS server information, and other parameters for a defined lease period. This reduces manual configuration and helps administrators manage addressing efficiently across large networks. OSPF and BGP exchange routing information, while STP prevents Layer 2 switching loops. Therefore, DHCP is the protocol responsible for dynamically assigning IPv4 addresses to client devices.<\/span><\/p>\n

                            Question 174<\/b><\/h3>\n

                            Which Cisco IOS command displays the startup configuration saved in NVRAM?<\/b><\/p>\n

                              \n
                            1. show running-config<\/span><\/li>\n
                            2. show startup-config<\/span><\/li>\n
                            3. show flash:<\/span><\/li>\n
                            4. show version<\/span><\/li>\n<\/ol>\n

                              Correct Answer: 2<\/b><\/p>\n

                              Explanation<\/b><\/p>\n

                              The <\/span>show startup-config<\/span> command displays the configuration stored in NVRAM that the Cisco device will use during the next boot. This configuration is separate from the active running configuration in RAM. Administrators commonly compare the running and startup configurations to determine whether recent changes have been saved. The <\/span>show running-config<\/span> command displays the active configuration, while <\/span>show flash:<\/span> lists files stored in flash memory. Therefore, <\/span>show startup-config<\/span> is the correct command for viewing the saved configuration.<\/span><\/p>\n

                              Question 175<\/b><\/h3>\n

                              Which wireless security method provides authentication using a pre-shared key?<\/b><\/p>\n

                                \n
                              1. WPA2-Personal<\/span><\/li>\n
                              2. WPA2-Enterprise<\/span><\/li>\n
                              3. 802.1X with RADIUS only<\/span><\/li>\n
                              4. Open authentication<\/span><\/li>\n<\/ol>\n

                                Correct Answer: 1<\/b><\/p>\n

                                Explanation<\/b><\/p>\n

                                WPA2-Personal uses a pre-shared key, commonly called a PSK, to authenticate wireless clients to a network. The same shared credential is typically configured on the access point and participating client devices. WPA2-Enterprise uses individual authentication through an authentication server, commonly RADIUS, rather than relying on one shared password for all users. Open authentication provides no comparable shared security credential. Therefore, WPA2-Personal is the wireless security method that uses a pre-shared key for authentication.<\/span><\/p>\n

                                Question 176<\/b><\/h3>\n

                                Which routing table entry is preferred when two routes to the same destination have different administrative distances?<\/b><\/p>\n

                                  \n
                                1. The route with the higher administrative distance<\/span><\/li>\n
                                2. The route with the lower administrative distance<\/span><\/li>\n
                                3. The route learned most recently<\/span><\/li>\n
                                4. The route with the highest metric only<\/span><\/li>\n<\/ol>\n

                                  Correct Answer: 2<\/b><\/p>\n

                                  Explanation<\/b><\/p>\n

                                  When a router has multiple routes to the same destination learned from different routing sources, administrative distance is used to determine which source is considered more trustworthy. The route with the lower administrative distance is preferred. For example, a static route normally has an administrative distance of 1, while an OSPF route has an administrative distance of 110. Metrics are then used within a routing protocol to select the best path among routes from that same protocol. Therefore, the lower administrative distance is preferred between different route sources.<\/span><\/p>\n

                                  Question 177<\/b><\/h3>\n

                                  Which protocol is responsible for securely managing a Cisco device through an encrypted remote CLI session?<\/b><\/p>\n

                                    \n
                                  1. Telnet<\/span><\/li>\n
                                  2. SSH<\/span><\/li>\n
                                  3. TFTP<\/span><\/li>\n
                                  4. SNMP<\/span><\/li>\n<\/ol>\n

                                    Correct Answer: 2<\/b><\/p>\n

                                    Explanation<\/b><\/p>\n

                                    Secure Shell, or SSH, provides encrypted remote command-line access to Cisco routers and switches. SSH protects login credentials and management traffic from being transmitted in clear text, making it much safer than Telnet for remote administration. Administrators can configure local usernames, domain information, RSA keys, and VTY lines to enable SSH access. TFTP is used for file transfers, SNMP is used for monitoring and management, and Telnet does not encrypt its session. Therefore, SSH is the correct protocol for secure remote CLI management.<\/span><\/p>\n

                                    Question 178<\/b><\/h3>\n

                                    Which Cisco IOS command enables a Layer 3 switch to perform IPv4 routing?<\/b><\/p>\n

                                      \n
                                    1. ip routing<\/span><\/li>\n
                                    2. ip forwarding enable<\/span><\/li>\n
                                    3. router enable<\/span><\/li>\n
                                    4. routing ipv4<\/span><\/li>\n<\/ol>\n

                                      Correct Answer: 1<\/b><\/p>\n

                                      Explanation<\/b><\/p>\n

                                      The <\/span>ip routing<\/span> command enables IPv4 routing on a Cisco multilayer switch. Once enabled, the switch can perform Layer 3 forwarding between directly connected networks and configured routing sources. This capability allows multilayer switches to perform functions such as inter-VLAN routing using SVIs. Layer 2 switches do not require <\/span>ip routing<\/span> for normal frame switching. The other commands listed are not valid Cisco IOS commands for enabling IPv4 routing. Therefore, <\/span>ip routing<\/span> is the correct command.<\/span><\/p>\n

                                      Question 179<\/b><\/h3>\n

                                      Which protocol is used by DHCP clients during the initial broadcast to locate available DHCP servers?<\/b><\/p>\n

                                        \n
                                      1. DHCPACK<\/span><\/li>\n
                                      2. DHCPREQUEST<\/span><\/li>\n
                                      3. DHCPDISCOVER<\/span><\/li>\n
                                      4. DHCPOFFER<\/span><\/li>\n<\/ol>\n

                                        Correct Answer: 3<\/b><\/p>\n

                                        Explanation<\/b><\/p>\n

                                        DHCPDISCOVER is the first major message sent by a DHCP client when it needs to locate available DHCP servers. Because the client may not yet have an IP address or know the DHCP server’s address, the message is normally sent as a broadcast on the local network. DHCP servers respond with DHCPOFFER messages containing proposed configuration information. DHCPREQUEST is used later when the client requests a specific offer, and DHCPACK confirms the assigned configuration. Therefore, DHCPDISCOVER is the correct initial discovery message.<\/span><\/p>\n

                                        Question 180<\/b><\/h3>\n

                                        Which network automation technology is designed to allow applications to interact with network devices using standardized HTTP-based operations?<\/b><\/p>\n

                                          \n
                                        1. RESTCONF<\/span><\/li>\n
                                        2. Console access<\/span><\/li>\n
                                        3. Telnet<\/span><\/li>\n
                                        4. FTP<\/span><\/li>\n<\/ol>\n

                                          Correct Answer: 1<\/b><\/p>\n

                                          Explanation<\/b><\/p>\n

                                          RESTCONF is a network management protocol that provides programmatic access to configuration and operational data using REST-style HTTP methods. It commonly works with YANG data models and can use structured formats such as JSON or XML. RESTCONF allows automation applications to retrieve, create, modify, and delete network resources through standardized web-based operations. Console access and Telnet are primarily interactive management methods, while FTP is designed for file transfers. Therefore, RESTCONF is the correct technology for HTTP-based network automation and device management.<\/span><\/p>\n

                                           <\/p>\n","protected":false},"excerpt":{"rendered":"

                                          View Full\u00a0Cisco 200-301 Exam Dumps\u00a0and Practice Test Dumps.   Question 161 Which IPv4 subnet mask provides 14 usable host addresses? 255.255.255.248 255.255.255.240 255.255.255.224 255.255.255.192 Correct Answer: 2 Explanation The subnet mask 255.255.255.240 represents a \/28 prefix. A \/28 subnet contains 16 total IPv4 addresses. One address is reserved for the network address and another for […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1648,1647],"tags":[],"_links":{"self":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/11877"}],"collection":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/comments?post=11877"}],"version-history":[{"count":1,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/11877\/revisions"}],"predecessor-version":[{"id":11878,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/11877\/revisions\/11878"}],"wp:attachment":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/media?parent=11877"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/categories?post=11877"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/tags?post=11877"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}