Pass Cisco CCNA 200-301 Exam in First Attempt Easily
Real Cisco CCNA 200-301 Exam Questions, Accurate & Verified Answers As Experienced in the Actual Test!

Verified by experts
3 products

You save $69.98

200-301 Premium Bundle

  • Premium File 760 Questions & Answers
  • Last Update: Nov 4, 2026
  • Training Course 271 Lectures
  • Study Guide 1969 Pages
$79.99 $149.97

Purchase Individually

  • Premium File

    760 Questions & Answers
    Last Update: Nov 4, 2026

    $76.99
    $69.99
  • Training Course

    271 Lectures

    $43.99
    $39.99
  • Study Guide

    1969 Pages

    $43.99
    $39.99

Cisco Certified Network Associate (CCNA) 200-301 Practice Test 17

Question 160

At a payment processor, the campus network lead expects an old inactive host MAC entry to be removed automatically after the host is disconnected. Which choice best addresses the stated requirement?

  1. Disable all VLANs to force the aging operation.
  2. Allow MAC aging to retire stale dynamically learned entries.
  3. Tune ARP aging on the adjacent router and assume it removes a dynamically learned switch CAM entry.
  4. Set the ARP cache lifetime as the only Layer 2 MAC-aging control.

Explanation

Correct Answer

B:

Dynamic MAC entries expire after inactivity so the switch can relearn moved destinations.

Incorrect Answers

A:

Removing every VLAN interrupts legitimate traffic instead of normal aging.

C:

ARP entries and switch CAM entries are separate state tables; switch MAC aging is controlled by its local MAC aging behavior.

D:

ARP and bridge MAC aging are separate tables.

Question 161

At an enterprise data center, the campus network lead must attach a normal untagged workstation on GigabitEthernet1/0/27 to existing data VLAN 80. Which IOS configuration establishes the intended membership?

  1. interface GigabitEthernet1/0/27 ; ip address 10.0.0.1 255.255.255.0
  2. interface GigabitEthernet1/0/27 ; switchport mode trunk ; switchport trunk native vlan 80
  3. interface GigabitEthernet1/0/27 ; switchport mode access ; switchport access vlan 50
  4. interface GigabitEthernet1/0/27 ; switchport mode access ; switchport access vlan 80

Explanation

Correct Answer

D:

The port is forced into access mode and placed in VLAN 80, so its untagged endpoint frames join that single data VLAN. VLAN 80 must exist and be active on this switch.

Incorrect Answers

A:

An access switchport in Layer 2 mode is not given a routed IP address by substituting for its VLAN assignment. Gateway addressing belongs on an SVI or routed interface.

B:

Trunk mode permits tagged VLAN traffic and is inappropriate for the stipulated simple non-tagging workstation. Native VLAN configuration does not itself make the port an access port.

C:

This command uses VLAN 50; the endpoint must be attached to VLAN 80. A successful interface configuration in the wrong VLAN still fails segmentation requirements.

Question 162

At a hotel, the campus network lead connects an IP phone with a PC daisy-chained behind it to GigabitEthernet1/0/11; PC data uses VLAN 30, while phone voice must use VLAN 18. Which interface configuration fits?

  1. interface GigabitEthernet1/0/11 ; switchport mode access ; switchport access vlan 30 ; switchport voice vlan 18
  2. interface GigabitEthernet1/0/11 ; switchport mode trunk ; switchport trunk native vlan 30 ; switchport trunk native vlan 18
  3. interface GigabitEthernet1/0/11 ; shutdown ; switchport voice vlan 18
  4. interface GigabitEthernet1/0/11 ; switchport access vlan 18 ; switchport voice vlan 30

Explanation

Correct Answer

A:

An access/data VLAN 30 and separate voice VLAN 18 allow the attached phone to tag voice frames while a downstream PC uses data VLAN 30. The voice feature is independent of trunk-mode uplink configuration.

Incorrect Answers

B:

Assigning native VLAN twice changes the same trunk setting and does not configure voice VLAN 18 for a phone-plus-PC access port. Only the last native statement would apply.

C:

Administratively shutting down GigabitEthernet1/0/11 prevents both voice and data forwarding. Voice VLAN configuration alone does not override interface shutdown.

D:

This reverses the required assignments: data frames would enter VLAN 18 and voice frames VLAN 30. The phone and PC would be in the wrong broadcast domains.

Question 163

At a media studio, the on-call technician needs router-on-a-stick routing for VLAN 100 on trunk GigabitEthernet0/0, with gateway 10.100.1.1/24. Which subinterface configuration is right?

  1. interface GigabitEthernet0/0.100 ; encapsulation dot1Q 100 ; ip address 10.100.1.1 255.255.255.0
  2. interface GigabitEthernet0/0.100 ; encapsulation dot1Q 30 ; ip address 10.100.1.1 255.255.255.0
  3. interface GigabitEthernet0/0.100 ; switchport mode access ; switchport access vlan 100
  4. interface GigabitEthernet0/0.100 ; encapsulation dot1Q 100 ; shutdown

Explanation

Correct Answer

A:

Router subinterface GigabitEthernet0/0.100 with 802.1Q tag 100 and a gateway IPv4 address routes VLAN 100 on a trunk. The upstream switch must allow and carry the same tag.

Incorrect Answers

B:

The dot1Q tag 30 belongs to a different VLAN and would not match frames tagged for 100. A subinterface number does not override the encapsulation VLAN ID.

C:

A routed router subinterface does not use normal Layer 2 switchport access commands. Router-on-a-stick uses 802.1Q encapsulation and Layer 3 addresses.

D:

Shutdown disables the VLAN 100 subinterface even if it has correct tagging. The gateway would not answer client traffic while administratively down.

Question 164

At a municipal utility, the migration lead is using a multilayer switch for inter-VLAN routing. VLAN 15 clients in 192.168.15.0/24 need their default gateway on the switch. Which configuration is suitable?

  1. interface Vlan15 ; ip address 192.168.15.1 255.255.255.0 ; no shutdown ; ip routing (global)
  2. interface GigabitEthernet1/0/15 ; switchport mode access ; ip routing
  3. interface Vlan40 ; ip address 192.168.15.1 255.255.255.0 ; no shutdown
  4. interface Vlan15 ; no ip address ; shutdown

Explanation

Correct Answer

A:

A routed SVI for VLAN 15 gives clients in 192.168.15.0/24 a local gateway when VLAN 15 has at least one active Layer 2 port and IP routing is enabled.

Incorrect Answers

B:

IP routing is a global Layer 3-switch feature, not an access-port replacement for an SVI. A switchport does not become the VLAN gateway with this one action.

C:

The gateway SVI is created in VLAN 40, so VLAN 15 clients would not use the intended interface. The VLAN interface number identifies the Layer 2 domain.

D:

An SVI with no IP address and shutdown cannot provide a client default gateway. L3 routing requires an active, addressed interface.

Question 165

At a media studio, a network operations engineer is onboarding a new access switch where VLAN 220 does not yet exist; GigabitEthernet1/0/14 will serve an untagged host. What should be configured?

  1. vlan 220 ; name FINANCE_220 ; interface GigabitEthernet1/0/14 ; switchport mode access ; switchport access vlan 220
  2. interface GigabitEthernet1/0/14 ; switchport trunk allowed vlan 220 ; switchport mode access
  3. interface GigabitEthernet1/0/14 ; description VLAN_220 ; switchport access vlan 90
  4. vlan 90 ; name FINANCE_220 ; interface GigabitEthernet1/0/14 ; switchport access vlan 90

Explanation

Correct Answer

A:

This creates VLAN 220 in the local VLAN database and then assigns the access interface to that VLAN. The resulting membership can be verified with show vlan brief.

Incorrect Answers

B:

Allowed VLAN lists apply to trunk links; this port is explicitly access mode and does not become a member of VLAN 220 merely through a trunk allowance.

C:

An interface description containing 220 has no impact on actual VLAN forwarding. The access VLAN command assigns VLAN 90.

D:

Creating and assigning VLAN 90 does not put the station into VLAN 220. The VLAN name is only descriptive; its numeric ID controls membership.

Question 166

At a logistics provider, an implementation partner is auditing an access port GigabitEthernet1/0/13 supposed to be in VLAN 110, not VLAN 150. Which observation directly confirms the assigned access VLAN?

  1. show ip route includes a default route but VLAN 110 has no assigned port
  2. show vlan brief confirms GigabitEthernet1/0/13 under VLAN 150
  3. show vlan brief confirms GigabitEthernet1/0/13 under VLAN 110
  4. `show interfaces trunk` displays VLAN 110 permitted on an upstream trunk but does not list GigabitEthernet1/0/13's assigned access VLAN.

Explanation

Correct Answer

C:

For an access port, show vlan brief can verify membership of GigabitEthernet1/0/13 in VLAN 110; follow with MAC learning or traffic checks for functional forwarding.

Incorrect Answers

A:

A Layer 3 default route does not establish Layer 2 access-port placement. The local VLAN must contain the intended endpoint port.

B:

The port listed under VLAN 150 is in the wrong broadcast domain. A VLAN-name description does not change its actual numeric membership.

D:

An allowed VLAN on a trunk confirms transport eligibility, not the local access VLAN associated with GigabitEthernet1/0/13. The situation calls for evidence of the workstation port's actual membership.

Question 167

At a retail branch, the site engineer adds a second access switch. Hosts in VLAN 18 on each switch must share the same Layer 2 segment over one uplink; VLAN 40 serves other users. What is necessary?

  1. Create VLAN 18 only on switch A; VLANs automatically cross any inter-switch connection without tagging or trunk allowance.
  2. Configure VLAN 18 locally on each switch but block VLAN 18 in the inter-switch trunk allowed list.
  3. Assign every user to VLAN 40 to avoid inter-switch VLAN configuration.
  4. Create VLAN 18 on both switches and carry it across the tagged inter-switch trunk.

Explanation

Correct Answer

D:

VLAN 18 must be present on each relevant switching context and permitted on an inter-switch trunk to preserve its Layer 2 reachability. VLAN-specific MAC forwarding then spans the access switches.

Incorrect Answers

A:

An access-mode or restrictive trunk link can prevent VLAN 18 traffic even if a VLAN is configured locally. Trunk state and allowed VLANs matter.

B:

Local VLAN membership alone cannot carry tagged VLAN 18 across a trunk that does not permit it.

C:

Changing endpoints to VLAN 40 destroys the requested separation. The required VLAN is 18, not a substitute ID.

Question 168

At a logistics provider, the migration lead has hosts in VLAN 160 and VLAN 80 that can communicate within their own VLAN but not across the subnets. Which solution supplies controlled inter-VLAN connectivity?

  1. Enable IP routing and provide active gateways for VLAN 160 and VLAN 80.
  2. Delete VLAN 80 while keeping its hosts and subnet intact.
  3. Configure switchport access vlan 160 on every trunk port.
  4. Rely only on ARP broadcast flooding between VLAN 160 and VLAN 80.

Explanation

Correct Answer

A:

Inter-VLAN traffic needs a Layer 3 forwarding function and addressed VLAN interfaces or router subinterfaces. With active gateways for 160 and 80, a host can reach the other subnet subject to policy.

Incorrect Answers

B:

Deleting VLAN 80 disconnects its hosts from their intended Layer 2 segment rather than providing IP routing.

C:

Forcing trunks into access mode removes the multi-VLAN carriage needed between switches. It does not create routed interfaces for either subnet.

D:

ARP broadcasts stay within their VLAN domain and cannot perform Layer 3 routing across VLAN 160 and 80.

Question 169

At an e-commerce platform, a network operations engineer must attach a normal untagged workstation on GigabitEthernet1/0/39 to existing data VLAN 10. Which IOS configuration establishes the intended membership?

  1. interface GigabitEthernet1/0/39 ; ip address 10.0.0.1 255.255.255.0
  2. interface GigabitEthernet1/0/39 ; switchport mode access ; switchport access vlan 10
  3. interface GigabitEthernet1/0/39 ; switchport mode access ; switchport access vlan 200
  4. interface GigabitEthernet1/0/39 ; switchport mode trunk ; switchport trunk native vlan 10

Explanation

Correct Answer

B:

The port is forced into access mode and placed in VLAN 10, so its untagged endpoint frames join that single data VLAN. VLAN 10 must exist and be active on this switch.

Incorrect Answers

A:

An access switchport in Layer 2 mode is not given a routed IP address by substituting for its VLAN assignment. Gateway addressing belongs on an SVI or routed interface.

C:

This command uses VLAN 200; the endpoint must be attached to VLAN 10. A successful interface configuration in the wrong VLAN still fails segmentation requirements.

D:

Trunk mode permits tagged VLAN traffic and is inappropriate for the stipulated simple non-tagging workstation. Native VLAN configuration does not itself make the port an access port.

Question 170

A switch access port is configured with data VLAN 120 and voice VLAN 30. A phone tags its voice packets with VLAN 120 instead of 30, while the downstream PC is working. Which correction targets the phone traffic?

  1. Change the PC default gateway so the phone’s 802.1Q tag changes.
  2. Configure a second native VLAN on the same access port.
  3. Disable all phone-generated 802.1Q tags.
  4. Have the phone use voice VLAN 30 as advertised/configured and verify the switch voice VLAN setting.

Explanation

Correct Answer

D:

The port accepts untagged PC data on the access VLAN and tagged phone voice on the voice VLAN. Tagging voice with the PC VLAN merges those traffic classes.

Incorrect Answers

A:

Layer 3 default-gateway configuration cannot alter the VLAN tag the phone emits on its Ethernet interface.

B:

A normal voice-capable access port has an access/data VLAN and an associated voice VLAN, not multiple native VLANs.

C:

Without the correct voice tag, traffic uses the access/data classification rather than the intended separate voice VLAN.

Cisco Certified Network Associate (CCNA) (200-301) Practice Tests

Purchase Individually

  • Premium File

    760 Questions & Answers
    Last Update: Nov 4, 2026

    $76.99
    $69.99
  • Training Course

    271 Lectures

    $43.99
    $39.99
  • Study Guide

    1969 Pages

    $43.99
    $39.99

SPECIAL OFFER: GET 10% OFF
This is ONE TIME OFFER

You save
10%

Enter Your Email Address to Receive Your 10% Off Discount Code

SPECIAL OFFER: GET 10% OFF

You save
10%

Use Discount Code:

A confirmation link was sent to your e-mail.

Please check your mailbox for a message from support@examlabs.com and follow the directions.

Download Free Demo of VCE Exam Simulator

Experience Avanset VCE Exam Simulator for yourself.

Simply submit your email address below to get started with our interactive software demo of your free trial.

  • Realistic exam simulation and exam editor with preview functions
  • Whole exam in a single file with several different question types
  • Customizable exam-taking mode & detailed score reports