Pass Cisco CCNA 200-301 Exam in First Attempt Easily
Real Cisco CCNA 200-301 Exam Questions, Accurate & Verified Answers As Experienced in the Actual Test!

Verified by experts
3 products

You save $69.98

200-301 Premium Bundle

  • Premium File 760 Questions & Answers
  • Last Update: Nov 4, 2026
  • Training Course 271 Lectures
  • Study Guide 1969 Pages
$79.99 $149.97

Purchase Individually

  • Premium File

    760 Questions & Answers
    Last Update: Nov 4, 2026

    $76.99
    $69.99
  • Training Course

    271 Lectures

    $43.99
    $39.99
  • Study Guide

    1969 Pages

    $43.99
    $39.99

Cisco Certified Network Associate (CCNA) 200-301 Practice Test 18

Question 170

A switch access port is configured with data VLAN 120 and voice VLAN 30. A phone tags its voice packets with VLAN 120 instead of 30, while the downstream PC is working. Which correction targets the phone traffic?

  1. Change the PC default gateway so the phone’s 802.1Q tag changes.
  2. Configure a second native VLAN on the same access port.
  3. Disable all phone-generated 802.1Q tags.
  4. Have the phone use voice VLAN 30 as advertised/configured and verify the switch voice VLAN setting.

Explanation

Correct Answer

D:

The port accepts untagged PC data on the access VLAN and tagged phone voice on the voice VLAN. Tagging voice with the PC VLAN merges those traffic classes.

Incorrect Answers

A:

Layer 3 default-gateway configuration cannot alter the VLAN tag the phone emits on its Ethernet interface.

B:

A normal voice-capable access port has an access/data VLAN and an associated voice VLAN, not multiple native VLANs.

C:

Without the correct voice tag, traffic uses the access/data classification rather than the intended separate voice VLAN.

Question 171

At a payment processor, the branch support lead needs router-on-a-stick routing for VLAN 110 on trunk GigabitEthernet0/0, with gateway 10.110.1.1/24. Which subinterface configuration is right?

  1. interface GigabitEthernet0/0.110 ; encapsulation dot1Q 110 ; shutdown
  2. interface GigabitEthernet0/0.110 ; encapsulation dot1Q 90 ; ip address 10.110.1.1 255.255.255.0
  3. interface GigabitEthernet0/0.110 ; encapsulation dot1Q 110 ; ip address 10.110.1.1 255.255.255.0
  4. interface GigabitEthernet0/0.110 ; switchport mode access ; switchport access vlan 110

Explanation

Correct Answer

C:

Router subinterface GigabitEthernet0/0.110 with 802.1Q tag 110 and a gateway IPv4 address routes VLAN 110 on a trunk. The upstream switch must allow and carry the same tag.

Incorrect Answers

A:

Shutdown disables the VLAN 110 subinterface even if it has correct tagging. The gateway would not answer client traffic while administratively down.

B:

The dot1Q tag 90 belongs to a different VLAN and would not match frames tagged for 110. A subinterface number does not override the encapsulation VLAN ID.

D:

A routed router subinterface does not use normal Layer 2 switchport access commands. Router-on-a-stick uses 802.1Q encapsulation and Layer 3 addresses.

Question 172

At an enterprise data center, the on-call technician is using a multilayer switch for inter-VLAN routing. VLAN 220 clients in 192.168.0.0/24 need their default gateway on the switch. Which configuration is suitable?

  1. interface Vlan220 ; ip address 192.168.0.1 255.255.255.0 ; no shutdown ; ip routing (global)
  2. interface GigabitEthernet1/0/36 ; switchport mode access ; ip routing
  3. interface Vlan110 ; ip address 192.168.0.1 255.255.255.0 ; no shutdown
  4. interface Vlan220 ; no ip address ; shutdown

Explanation

Correct Answer

A:

A routed SVI for VLAN 220 gives clients in 192.168.0.0/24 a local gateway when VLAN 220 has at least one active Layer 2 port and IP routing is enabled.

Incorrect Answers

B:

IP routing is a global Layer 3-switch feature, not an access-port replacement for an SVI. A switchport does not become the VLAN gateway with this one action.

C:

The gateway SVI is created in VLAN 110, so VLAN 220 clients would not use the intended interface. The VLAN interface number identifies the Layer 2 domain.

D:

An SVI with no IP address and shutdown cannot provide a client default gateway. L3 routing requires an active, addressed interface.

Question 173

At a public library, the migration lead is onboarding a new access switch where VLAN 130 does not yet exist; GigabitEthernet1/0/39 will serve an untagged host. What should be configured?

  1. vlan 130 ; name FINANCE_130 ; interface GigabitEthernet1/0/39 ; switchport mode access ; switchport access vlan 130
  2. interface GigabitEthernet1/0/39 ; switchport trunk allowed vlan 130 ; switchport mode access
  3. interface GigabitEthernet1/0/39 ; description VLAN_130 ; switchport access vlan 150
  4. vlan 150 ; name FINANCE_130 ; interface GigabitEthernet1/0/39 ; switchport access vlan 150

Explanation

Correct Answer

A:

This creates VLAN 130 in the local VLAN database and then assigns the access interface to that VLAN. The resulting membership can be verified with show vlan brief.

Incorrect Answers

B:

Allowed VLAN lists apply to trunk links; this port is explicitly access mode and does not become a member of VLAN 130 merely through a trunk allowance.

C:

An interface description containing 130 has no impact on actual VLAN forwarding. The access VLAN command assigns VLAN 150.

D:

Creating and assigning VLAN 150 does not put the station into VLAN 130. The VLAN name is only descriptive; its numeric ID controls membership.

Question 174

At a media studio, the security and networking lead is auditing an access port GigabitEthernet1/0/37 supposed to be in VLAN 80, not VLAN 20. Which observation directly confirms the assigned access VLAN?

  1. show ip route includes a default route but VLAN 80 has no assigned port
  2. `show interfaces trunk` displays VLAN 80 permitted on an upstream trunk but does not list GigabitEthernet1/0/37's assigned access VLAN.
  3. show vlan brief confirms GigabitEthernet1/0/37 under VLAN 80
  4. show vlan brief confirms GigabitEthernet1/0/37 under VLAN 20

Explanation

Correct Answer

C:

For an access port, show vlan brief can verify membership of GigabitEthernet1/0/37 in VLAN 80; follow with MAC learning or traffic checks for functional forwarding.

Incorrect Answers

A:

A Layer 3 default route does not establish Layer 2 access-port placement. The local VLAN must contain the intended endpoint port.

B:

An allowed VLAN on a trunk confirms transport eligibility, not the local access VLAN associated with GigabitEthernet1/0/37. The situation calls for evidence of the workstation port's actual membership.

D:

The port listed under VLAN 20 is in the wrong broadcast domain. A VLAN-name description does not change its actual numeric membership.

Question 175

Users in VLAN 55 can communicate on switch A but cannot reach VLAN 55 endpoints on switch B. The trunk links are physically up, and other VLANs cross successfully. What should an engineer inspect?

  1. Reconfigure both switches to use an identical management interface MAC address.
  2. Disable spanning tree globally to eliminate VLAN-specific filtering.
  3. Move all clients to the native VLAN without examining allowed VLANs.
  4. Confirm VLAN 55 exists on both switches and is permitted and forwarding across the trunk.

Explanation

Correct Answer

D:

An up trunk can still filter a single VLAN by its allowed-list or STP state. Verify the VLAN database and operational trunk status on both ends.

Incorrect Answers

A:

Duplicate management MAC addresses are not a remedy for a filtered or missing data VLAN.

B:

Removing STP protection creates loop risk and does not diagnose why one VLAN is blocked.

C:

This changes segmentation and security but avoids identifying the actual missing VLAN transport.

Question 176

At a telecom operations room, the branch support lead has hosts in VLAN 15 and VLAN 50 that can communicate within their own VLAN but not across the subnets. Which solution supplies controlled inter-VLAN connectivity?

  1. Delete VLAN 50 while keeping its hosts and subnet intact.
  2. Enable IP routing and provide active gateways for VLAN 15 and VLAN 50.
  3. Rely only on ARP broadcast flooding between VLAN 15 and VLAN 50.
  4. Configure switchport access vlan 15 on every trunk port.

Explanation

Correct Answer

B:

Inter-VLAN traffic needs a Layer 3 forwarding function and addressed VLAN interfaces or router subinterfaces. With active gateways for 15 and 50, a host can reach the other subnet subject to policy.

Incorrect Answers

A:

Deleting VLAN 50 disconnects its hosts from their intended Layer 2 segment rather than providing IP routing.

C:

ARP broadcasts stay within their VLAN domain and cannot perform Layer 3 routing across VLAN 15 and 50.

D:

Forcing trunks into access mode removes the multi-VLAN carriage needed between switches. It does not create routed interfaces for either subnet.

Question 177

GigabitEthernet1/0/40 was configured as an access port in VLAN 130. A change accidentally deletes VLAN 130 from the local switch database, and the port no longer forwards user traffic. What restores the intended access-VLAN operation without reassigning users?

  1. Recreate VLAN 130 on the switch, confirm it is active, and verify Gi1/0/40 still references access VLAN 130.
  2. Change the native VLAN on an unrelated uplink, leaving VLAN 130 absent from the local VLAN database.
  3. Configure `switchport voice vlan 130` on the port but leave the ordinary data VLAN missing.
  4. Set the port to access VLAN 1 permanently and assert that VLAN 130 users remain in their old broadcast domain.

Explanation

Correct Answer

A:

A deleted VLAN is inactive even if an access port retains a configuration reference. Restoring the VLAN database entry and confirming forwarding restores the intended Layer 2 membership.

Incorrect Answers

B:

An unrelated trunk native-VLAN change cannot create a missing local VLAN or revive an inactive access assignment.

C:

Voice VLAN configuration does not create the specified ordinary workstation access VLAN state.

D:

Changing to VLAN 1 moves users into a different broadcast domain, violating the requirement to retain VLAN 130 segmentation.

Question 178

At an airport terminal, an implementation partner connects an IP phone with a PC daisy-chained behind it to GigabitEthernet1/0/36; PC data uses VLAN 30, while phone voice must use VLAN 35. Which interface configuration fits?

  1. interface GigabitEthernet1/0/36 ; switchport mode trunk ; switchport trunk native vlan 30 ; switchport trunk native vlan 35
  2. interface GigabitEthernet1/0/36 ; switchport access vlan 35 ; switchport voice vlan 30
  3. interface GigabitEthernet1/0/36 ; switchport mode access ; switchport access vlan 30 ; switchport voice vlan 35
  4. interface GigabitEthernet1/0/36 ; shutdown ; switchport voice vlan 35

Explanation

Correct Answer

C:

An access/data VLAN 30 and separate voice VLAN 35 allow the attached phone to tag voice frames while a downstream PC uses data VLAN 30. The voice feature is independent of trunk-mode uplink configuration.

Incorrect Answers

A:

Assigning native VLAN twice changes the same trunk setting and does not configure voice VLAN 35 for a phone-plus-PC access port. Only the last native statement would apply.

B:

This reverses the required assignments: data frames would enter VLAN 35 and voice frames VLAN 30. The phone and PC would be in the wrong broadcast domains.

D:

Administratively shutting down GigabitEthernet1/0/36 prevents both voice and data forwarding. Voice VLAN configuration alone does not override interface shutdown.

Question 179

At a field-service firm, a network operations engineer needs router-on-a-stick routing for VLAN 160 on trunk GigabitEthernet0/0, with gateway 10.160.1.1/24. Which subinterface configuration is right?

  1. interface GigabitEthernet0/0.160 ; switchport mode access ; switchport access vlan 160
  2. interface GigabitEthernet0/0.160 ; encapsulation dot1Q 160 ; ip address 10.160.1.1 255.255.255.0
  3. interface GigabitEthernet0/0.160 ; encapsulation dot1Q 160 ; shutdown
  4. interface GigabitEthernet0/0.160 ; encapsulation dot1Q 10 ; ip address 10.160.1.1 255.255.255.0

Explanation

Correct Answer

B:

Router subinterface GigabitEthernet0/0.160 with 802.1Q tag 160 and a gateway IPv4 address routes VLAN 160 on a trunk. The upstream switch must allow and carry the same tag.

Incorrect Answers

A:

A routed router subinterface does not use normal Layer 2 switchport access commands. Router-on-a-stick uses 802.1Q encapsulation and Layer 3 addresses.

C:

Shutdown disables the VLAN 160 subinterface even if it has correct tagging. The gateway would not answer client traffic while administratively down.

D:

The dot1Q tag 10 belongs to a different VLAN and would not match frames tagged for 160. A subinterface number does not override the encapsulation VLAN ID.

Question 180

Two active SVIs on a multilayer switch are up/up, and hosts can ping their own SVI gateways but cannot reach the other VLAN. The switch is currently operating without Layer 3 forwarding. Which change directly addresses the missing function?

  1. Enable global ip routing on the multilayer switch after confirming ACL and topology requirements.
  2. Set switchport mode trunk on all user-facing access ports.
  3. Configure an identical IPv4 address on both SVIs.
  4. Disable all active VLAN interfaces and depend only on switching.

Explanation

Correct Answer

A:

SVIs provide Layer 3 interfaces, but inter-VLAN forwarding needs routing enabled. Validate allowed routes and filters after enabling forwarding.

Incorrect Answers

B:

A trunk on each host port is not required for SVI-based inter-VLAN routing and may break untagged hosts.

C:

Overlapping address assignments cause addressing conflicts; distinct VLAN routed interfaces need distinct subnets.

D:

Disabling the SVIs removes hosts’ gateways and prevents Layer 3 forwarding, the stated requirement.

Cisco Certified Network Associate (CCNA) (200-301) Practice Tests

Purchase Individually

  • Premium File

    760 Questions & Answers
    Last Update: Nov 4, 2026

    $76.99
    $69.99
  • Training Course

    271 Lectures

    $43.99
    $39.99
  • Study Guide

    1969 Pages

    $43.99
    $39.99

SPECIAL OFFER: GET 10% OFF
This is ONE TIME OFFER

You save
10%

Enter Your Email Address to Receive Your 10% Off Discount Code

SPECIAL OFFER: GET 10% OFF

You save
10%

Use Discount Code:

A confirmation link was sent to your e-mail.

Please check your mailbox for a message from support@examlabs.com and follow the directions.

Download Free Demo of VCE Exam Simulator

Experience Avanset VCE Exam Simulator for yourself.

Simply submit your email address below to get started with our interactive software demo of your free trial.

  • Realistic exam simulation and exam editor with preview functions
  • Whole exam in a single file with several different question types
  • Customizable exam-taking mode & detailed score reports