Pass Cisco CCNA 200-301 Exam in First Attempt Easily
Real Cisco CCNA 200-301 Exam Questions, Accurate & Verified Answers As Experienced in the Actual Test!

Verified by experts
3 products

You save $69.98

200-301 Premium Bundle

  • Premium File 760 Questions & Answers
  • Last Update: Nov 4, 2026
  • Training Course 271 Lectures
  • Study Guide 1969 Pages
$79.99 $149.97

Purchase Individually

  • Premium File

    760 Questions & Answers
    Last Update: Nov 4, 2026

    $76.99
    $69.99
  • Training Course

    271 Lectures

    $43.99
    $39.99
  • Study Guide

    1969 Pages

    $43.99
    $39.99

Cisco Certified Network Associate (CCNA) 200-301 Practice Test 19

Question 180

Two active SVIs on a multilayer switch are up/up, and hosts can ping their own SVI gateways but cannot reach the other VLAN. The switch is currently operating without Layer 3 forwarding. Which change directly addresses the missing function?

  1. Enable global ip routing on the multilayer switch after confirming ACL and topology requirements.
  2. Set switchport mode trunk on all user-facing access ports.
  3. Configure an identical IPv4 address on both SVIs.
  4. Disable all active VLAN interfaces and depend only on switching.

Explanation

Correct Answer

A:

SVIs provide Layer 3 interfaces, but inter-VLAN forwarding needs routing enabled. Validate allowed routes and filters after enabling forwarding.

Incorrect Answers

B:

A trunk on each host port is not required for SVI-based inter-VLAN routing and may break untagged hosts.

C:

Overlapping address assignments cause addressing conflicts; distinct VLAN routed interfaces need distinct subnets.

D:

Disabling the SVIs removes hosts’ gateways and prevents Layer 3 forwarding, the stated requirement.

Question 181

At a distribution center, the on-call technician is onboarding a new access switch where VLAN 130 does not yet exist; GigabitEthernet1/0/32 will serve an untagged host. What should be configured?

  1. vlan 130 ; name FINANCE_130 ; interface GigabitEthernet1/0/32 ; switchport mode access ; switchport access vlan 130
  2. interface GigabitEthernet1/0/32 ; description VLAN_130 ; switchport access vlan 100
  3. vlan 100 ; name FINANCE_130 ; interface GigabitEthernet1/0/32 ; switchport access vlan 100
  4. interface GigabitEthernet1/0/32 ; switchport trunk allowed vlan 130 ; switchport mode access

Explanation

Correct Answer

A:

This creates VLAN 130 in the local VLAN database and then assigns the access interface to that VLAN. The resulting membership can be verified with show vlan brief.

Incorrect Answers

B:

An interface description containing 130 has no impact on actual VLAN forwarding. The access VLAN command assigns VLAN 100.

C:

Creating and assigning VLAN 100 does not put the station into VLAN 130. The VLAN name is only descriptive; its numeric ID controls membership.

D:

Allowed VLAN lists apply to trunk links; this port is explicitly access mode and does not become a member of VLAN 130 merely through a trunk allowance.

Question 182

A technician configured `switchport access vlan 18` on Gi1/0/32. `show vlan brief` lists VLAN 18, but the port still receives tagged frames from an upstream appliance. Which command best confirms whether the interface actually operates as an access port and its active access VLAN?

  1. `show interfaces GigabitEthernet1/0/32 switchport`, inspecting the operational mode and access VLAN fields.
  2. `show mac address-table vlan 18` alone, because learned entries prove the interface's configured administrative switchport mode.
  3. `show ip route` on the distribution router, because routing entries display the switchport's access/trunk operation.
  4. `show spanning-tree root` alone, because root election identifies the port's access VLAN and operational encapsulation.

Explanation

Correct Answer

A:

The interface switchport detail view reports administrative and operational modes and the access VLAN, distinguishing a configured access command from actual trunk state.

Incorrect Answers

B:

A learned MAC/VLAN can confirm forwarding observations but cannot show the port's administrative/operational switchport mode unambiguously.

C:

An upstream router's IP routing table does not expose an access switch interface's Layer 2 mode.

D:

The spanning-tree root identity concerns bridge election, not which administrative mode is active on Gi1/0/32.

Question 183

Switch A and switch B both have VLAN 130 in the VLAN database and access hosts assigned correctly. `show interfaces trunk` reveals the inter-switch 802.1Q uplink is UP but its allowed-VLAN list excludes 130. Hosts cannot communicate across the switches. Which correction is appropriate?

  1. Change the hosts to VLAN 20 and remove VLAN 130 from both devices.
  2. Set VLAN 130 as the native VLAN on only one side without adding it to the trunk allowed list.
  3. Force the trunk to access mode on VLAN 1 while retaining two distinct VLANs.
  4. Add VLAN 130 to the permitted VLAN list on both ends of the existing trunk while preserving required existing VLANs.

Explanation

Correct Answer

D:

An operational 802.1Q trunk still filters traffic by its allowed-VLAN list. The VLAN must be both locally present and allowed across the path to carry the intended Layer 2 broadcast domain.

Incorrect Answers

A:

The requirement is to preserve VLAN 130 connectivity; reassigning hosts removes the specified segmentation.

B:

A native-VLAN mismatch risks untagged-frame misclassification and does not correctly add VLAN 130 to permitted trunk traffic.

C:

An access link carries one untagged VLAN; it cannot replace an allowed 802.1Q trunk transporting the specified VLANs.

Question 184

At a distribution center, the security and networking lead has hosts in VLAN 40 and VLAN 50 that can communicate within their own VLAN but not across the subnets. Which solution supplies controlled inter-VLAN connectivity?

  1. Configure switchport access vlan 40 on every trunk port.
  2. Rely only on ARP broadcast flooding between VLAN 40 and VLAN 50.
  3. Enable IP routing and provide active gateways for VLAN 40 and VLAN 50.
  4. Delete VLAN 50 while keeping its hosts and subnet intact.

Explanation

Correct Answer

C:

Inter-VLAN traffic needs a Layer 3 forwarding function and addressed VLAN interfaces or router subinterfaces. With active gateways for 40 and 50, a host can reach the other subnet subject to policy.

Incorrect Answers

A:

Forcing trunks into access mode removes the multi-VLAN carriage needed between switches. It does not create routed interfaces for either subnet.

B:

ARP broadcasts stay within their VLAN domain and cannot perform Layer 3 routing across VLAN 40 and 50.

D:

Deleting VLAN 50 disconnects its hosts from their intended Layer 2 segment rather than providing IP routing.

Question 185

At a research campus, the branch support lead must attach a normal untagged workstation on GigabitEthernet1/0/40 to existing data VLAN 24. Which IOS configuration establishes the intended membership?

  1. interface GigabitEthernet1/0/40 ; switchport mode trunk ; switchport trunk native vlan 24
  2. interface GigabitEthernet1/0/40 ; switchport mode access ; switchport access vlan 150
  3. interface GigabitEthernet1/0/40 ; switchport mode access ; switchport access vlan 24
  4. interface GigabitEthernet1/0/40 ; ip address 10.0.0.1 255.255.255.0

Explanation

Correct Answer

C:

The port is forced into access mode and placed in VLAN 24, so its untagged endpoint frames join that single data VLAN. VLAN 24 must exist and be active on this switch.

Incorrect Answers

A:

Trunk mode permits tagged VLAN traffic and is inappropriate for the stipulated simple non-tagging workstation. Native VLAN configuration does not itself make the port an access port.

B:

This command uses VLAN 150; the endpoint must be attached to VLAN 24. A successful interface configuration in the wrong VLAN still fails segmentation requirements.

D:

An access switchport in Layer 2 mode is not given a routed IP address by substituting for its VLAN assignment. Gateway addressing belongs on an SVI or routed interface.

Question 186

An IP phone on a configured voice VLAN tags its voice traffic, but the access-switch uplink treats all packets as best-effort. What should be inspected to verify that the voice quality-of-service boundary is working?

  1. Change the laptop's data VLAN to match the phone's voice VLAN and disable all voice tagging.
  2. Leave the voice VLAN intact but remove all QoS classification and expect the priority queue to infer phone traffic.
  3. Check the phone-facing port's voice VLAN and CoS/DSCP trust policy, then verify classified voice marking at the uplink.
  4. Change the native VLAN only on the far-end trunk and assume the voice CoS marking will be trusted.

Explanation

Correct Answer

C:

Tagging into a voice VLAN and receiving appropriate scheduling are separate: inspect markings, trust boundary and egress classification.

Incorrect Answers

A:

Collapsing voice and data VLANs undermines traffic segregation and does not establish trustworthy QoS classification.

B:

Without mapping or trust policy, prioritization is not guaranteed just because voice packets have a VLAN tag.

D:

A one-ended native VLAN change can misclassify untagged traffic and does not configure QoS treatment.

Question 187

At a school district, the campus network lead needs router-on-a-stick routing for VLAN 12 on trunk GigabitEthernet0/0, with gateway 10.12.1.1/24. Which subinterface configuration is right?

  1. interface GigabitEthernet0/0.12 ; encapsulation dot1Q 90 ; ip address 10.12.1.1 255.255.255.0
  2. interface GigabitEthernet0/0.12 ; encapsulation dot1Q 12 ; shutdown
  3. interface GigabitEthernet0/0.12 ; switchport mode access ; switchport access vlan 12
  4. interface GigabitEthernet0/0.12 ; encapsulation dot1Q 12 ; ip address 10.12.1.1 255.255.255.0

Explanation

Correct Answer

D:

Router subinterface GigabitEthernet0/0.12 with 802.1Q tag 12 and a gateway IPv4 address routes VLAN 12 on a trunk. The upstream switch must allow and carry the same tag.

Incorrect Answers

A:

The dot1Q tag 90 belongs to a different VLAN and would not match frames tagged for 12. A subinterface number does not override the encapsulation VLAN ID.

B:

Shutdown disables the VLAN 12 subinterface even if it has correct tagging. The gateway would not answer client traffic while administratively down.

C:

A routed router subinterface does not use normal Layer 2 switchport access commands. Router-on-a-stick uses 802.1Q encapsulation and Layer 3 addresses.

Question 188

A Layer 3 switch uses `interface Vlan220` with 192.168.0.1/24 and `no shutdown`, and `ip routing` is enabled. But `show ip interface brief` reports Vlan220 protocol down; there are no active forwarding ports in VLAN 220. What should be verified first?

  1. Remove `ip routing` and leave the SVI as a host-only address.
  2. Ensure VLAN 220 exists and has at least one forwarding Layer 2 member, or an active trunk carrying it.
  3. Keep changing the SVI IP address while the VLAN remains inactive.
  4. Configure `ip default-gateway` to replace VLAN participation.

Explanation

Correct Answer

B:

An SVI normally depends on a present VLAN with operational Layer 2 forwarding participation (autostate). With all participating ports inactive, the SVI line protocol may remain down even though its IP address and no shutdown are correct.

Incorrect Answers

A:

Removing IP routing cannot bring up an SVI whose underlying VLAN has no active forwarding members.

C:

The given /24 gateway address is valid; changing Layer 3 identity does not cure missing Layer 2 activity.

D:

A management default gateway does not supply the operational VLAN/port state needed to bring an SVI up.

Question 189

At a field-service firm, a network administrator is onboarding a new access switch where VLAN 30 does not yet exist; GigabitEthernet1/0/37 will serve an untagged host. What should be configured?

  1. vlan 30 ; name FINANCE_30 ; interface GigabitEthernet1/0/37 ; switchport mode access ; switchport access vlan 30
  2. vlan 100 ; name FINANCE_30 ; interface GigabitEthernet1/0/37 ; switchport access vlan 100
  3. interface GigabitEthernet1/0/37 ; description VLAN_30 ; switchport access vlan 100
  4. interface GigabitEthernet1/0/37 ; switchport trunk allowed vlan 30 ; switchport mode access

Explanation

Correct Answer

A:

This creates VLAN 30 in the local VLAN database and then assigns the access interface to that VLAN. The resulting membership can be verified with show vlan brief.

Incorrect Answers

B:

Creating and assigning VLAN 100 does not put the station into VLAN 30. The VLAN name is only descriptive; its numeric ID controls membership.

C:

An interface description containing 30 has no impact on actual VLAN forwarding. The access VLAN command assigns VLAN 100.

D:

Allowed VLAN lists apply to trunk links; this port is explicitly access mode and does not become a member of VLAN 30 merely through a trunk allowance.

Question 190

At an airport terminal, the infrastructure lead is auditing an access port GigabitEthernet1/0/4 supposed to be in VLAN 12, not VLAN 20. Which observation directly confirms the assigned access VLAN?

  1. show vlan brief confirms GigabitEthernet1/0/4 under VLAN 12
  2. show ip route includes a default route but VLAN 12 has no assigned port
  3. show vlan brief confirms GigabitEthernet1/0/4 under VLAN 20
  4. `show interfaces trunk` displays VLAN 12 permitted on an upstream trunk but does not list GigabitEthernet1/0/4's assigned access VLAN.

Explanation

Correct Answer

A:

For an access port, show vlan brief can verify membership of GigabitEthernet1/0/4 in VLAN 12; follow with MAC learning or traffic checks for functional forwarding.

Incorrect Answers

B:

A Layer 3 default route does not establish Layer 2 access-port placement. The local VLAN must contain the intended endpoint port.

C:

The port listed under VLAN 20 is in the wrong broadcast domain. A VLAN-name description does not change its actual numeric membership.

D:

An allowed VLAN on a trunk confirms transport eligibility, not the local access VLAN associated with GigabitEthernet1/0/4. The situation calls for evidence of the workstation port's actual membership.

Cisco Certified Network Associate (CCNA) (200-301) Practice Tests

Purchase Individually

  • Premium File

    760 Questions & Answers
    Last Update: Nov 4, 2026

    $76.99
    $69.99
  • Training Course

    271 Lectures

    $43.99
    $39.99
  • Study Guide

    1969 Pages

    $43.99
    $39.99

SPECIAL OFFER: GET 10% OFF
This is ONE TIME OFFER

You save
10%

Enter Your Email Address to Receive Your 10% Off Discount Code

SPECIAL OFFER: GET 10% OFF

You save
10%

Use Discount Code:

A confirmation link was sent to your e-mail.

Please check your mailbox for a message from support@examlabs.com and follow the directions.

Download Free Demo of VCE Exam Simulator

Experience Avanset VCE Exam Simulator for yourself.

Simply submit your email address below to get started with our interactive software demo of your free trial.

  • Realistic exam simulation and exam editor with preview functions
  • Whole exam in a single file with several different question types
  • Customizable exam-taking mode & detailed score reports