Pass Cisco CCNA 200-301 Exam in First Attempt Easily
Real Cisco CCNA 200-301 Exam Questions, Accurate & Verified Answers As Experienced in the Actual Test!

Verified by experts
3 products

You save $69.98

200-301 Premium Bundle

  • Premium File 760 Questions & Answers
  • Last Update: Nov 4, 2026
  • Training Course 271 Lectures
  • Study Guide 1969 Pages
$79.99 $149.97

Purchase Individually

  • Premium File

    760 Questions & Answers
    Last Update: Nov 4, 2026

    $76.99
    $69.99
  • Training Course

    271 Lectures

    $43.99
    $39.99
  • Study Guide

    1969 Pages

    $43.99
    $39.99

Cisco Certified Network Associate (CCNA) 200-301 Practice Test 20

Question 190

At an airport terminal, the infrastructure lead is auditing an access port GigabitEthernet1/0/4 supposed to be in VLAN 12, not VLAN 20. Which observation directly confirms the assigned access VLAN?

  1. show vlan brief confirms GigabitEthernet1/0/4 under VLAN 12
  2. show ip route includes a default route but VLAN 12 has no assigned port
  3. show vlan brief confirms GigabitEthernet1/0/4 under VLAN 20
  4. `show interfaces trunk` displays VLAN 12 permitted on an upstream trunk but does not list GigabitEthernet1/0/4's assigned access VLAN.

Explanation

Correct Answer

A:

For an access port, show vlan brief can verify membership of GigabitEthernet1/0/4 in VLAN 12; follow with MAC learning or traffic checks for functional forwarding.

Incorrect Answers

B:

A Layer 3 default route does not establish Layer 2 access-port placement. The local VLAN must contain the intended endpoint port.

C:

The port listed under VLAN 20 is in the wrong broadcast domain. A VLAN-name description does not change its actual numeric membership.

D:

An allowed VLAN on a trunk confirms transport eligibility, not the local access VLAN associated with GigabitEthernet1/0/4. The situation calls for evidence of the workstation port's actual membership.

Question 191

At a manufacturing plant, the security and networking lead adds a second access switch. Hosts in VLAN 60 on each switch must share the same Layer 2 segment over one uplink; VLAN 40 serves other users. What is necessary?

  1. Leave VLAN 60 pruned on one side of the inter-switch trunk and trust the access-port VLAN assignments alone.
  2. Assign every user to VLAN 40 to avoid inter-switch VLAN configuration.
  3. Create VLAN 60 on both switches and carry it across the tagged inter-switch trunk.
  4. Create VLAN 60 only on switch A; VLANs automatically cross any inter-switch connection without tagging or trunk allowance.

Explanation

Correct Answer

C:

VLAN 60 must be present on each relevant switching context and permitted on an inter-switch trunk to preserve its Layer 2 reachability. VLAN-specific MAC forwarding then spans the access switches.

Incorrect Answers

A:

A VLAN must be present and allowed on the inter-switch Layer 2 path; correct access membership cannot bypass trunk pruning.

B:

Changing endpoints to VLAN 40 destroys the requested separation. The required VLAN is 60, not a substitute ID.

D:

An access-mode or restrictive trunk link can prevent VLAN 60 traffic even if a VLAN is configured locally. Trunk state and allowed VLANs matter.

Question 192

An access switch connects a Cisco IP phone with a computer plugged into the phone's PC port. The PC must use data VLAN 20, while the phone signals voice frames on VLAN 120. Which switchport settings meet both needs?

  1. Set both access and voice VLANs to 120 to avoid tagging voice traffic.
  2. Configure an access port with `switchport access vlan 20` and `switchport voice vlan 120`.
  3. Set `switchport mode trunk` and disable all native VLAN handling on the phone-facing port.
  4. Keep only `switchport access vlan 20` and rely on QoS trust to create VLAN 120 automatically.

Explanation

Correct Answer

B:

A phone-facing access port can carry untagged PC data in the access VLAN and tagged phone voice traffic in the configured voice VLAN. The phone must learn and use the voice VLAN appropriately.

Incorrect Answers

A:

Assigning both to 120 eliminates the required data/voice separation and places the PC in the voice segment.

C:

A general switch-to-switch trunk configuration is not the necessary or safest way to configure a conventional phone-plus-PC access port; a distinct voice VLAN setting supports the scenario.

D:

QoS classification affects handling or priority, not VLAN membership; the voice VLAN must be specified rather than assumed from trust configuration.

Question 193

At a regional office, a network administrator must attach a normal untagged workstation on GigabitEthernet1/0/6 to existing data VLAN 90. Which IOS configuration establishes the intended membership?

  1. interface GigabitEthernet1/0/6 ; switchport mode access ; switchport access vlan 50
  2. interface GigabitEthernet1/0/6 ; switchport mode trunk ; switchport trunk native vlan 90
  3. interface GigabitEthernet1/0/6 ; ip address 10.0.0.1 255.255.255.0
  4. interface GigabitEthernet1/0/6 ; switchport mode access ; switchport access vlan 90

Explanation

Correct Answer

D:

The port is forced into access mode and placed in VLAN 90, so its untagged endpoint frames join that single data VLAN. VLAN 90 must exist and be active on this switch.

Incorrect Answers

A:

This command uses VLAN 50; the endpoint must be attached to VLAN 90. A successful interface configuration in the wrong VLAN still fails segmentation requirements.

B:

Trunk mode permits tagged VLAN traffic and is inappropriate for the stipulated simple non-tagging workstation. Native VLAN configuration does not itself make the port an access port.

C:

An access switchport in Layer 2 mode is not given a routed IP address by substituting for its VLAN assignment. Gateway addressing belongs on an SVI or routed interface.

Question 194

A phone on switch A uses voice VLAN 31 and data VLAN 20. The phone is reachable locally, but calls fail after traversing a trunk to switch B; data VLAN 20 works end to end. Which change should be checked first?

  1. Ensure voice VLAN 31 exists and is allowed on the inter-switch trunk end to end.
  2. Remove VLAN 20 from the trunk so voice uses all trunk bandwidth.
  3. Change every phone into a router-on-a-stick device.
  4. Adjust STP root priority on switch B without checking the trunk VLAN allowed list.

Explanation

Correct Answer

A:

The symptom isolates a separate tagged voice VLAN. If the trunk allows data VLAN 20 but not voice VLAN 31, the phone’s signaling or media cannot traverse the uplink.

Incorrect Answers

B:

Removing the working data VLAN does not permit VLAN 31 and disrupts PC traffic.

C:

Phone access ports with voice VLAN tags do not require each phone to perform inter-VLAN routing.

D:

STP priority can affect forwarding topology but does not add the missing voice VLAN 31 to the operational trunk allowance.

Question 195

A router subinterface GigabitEthernet0/0.30 has IP 10.30.0.1/24, but its encapsulation is configured for VLAN 40. VLAN 30 hosts cannot reach their gateway while the parent physical link is up. Which correction is appropriate?

  1. Leave dot1Q 40 and modify the interface description to say VLAN 30.
  2. Assign the same gateway IP to subinterfaces for VLAN 30 and 40.
  3. Convert the trunk link into an access VLAN 40 port while keeping both routed subinterfaces.
  4. Change the subinterface encapsulation to dot1Q 30 and verify the switch trunk carries VLAN 30.

Explanation

Correct Answer

D:

The VLAN tag expected by the router subinterface must match the clients’ tagged VLAN. The gateway IP alone does not associate frames with the correct 802.1Q ID.

Incorrect Answers

A:

Descriptions do not change packet tagging or the encapsulation match.

B:

Overlapping routed interface addresses can create conflicts and does not correct the 802.1Q mismatch.

C:

A single access VLAN does not carry distinct tagged VLAN 30 and 40 traffic to separate router subinterfaces.

Question 196

At a school district, a network administrator is using a multilayer switch for inter-VLAN routing. VLAN 30 clients in 192.168.30.0/24 need their default gateway on the switch. Which configuration is suitable?

  1. interface GigabitEthernet1/0/25 ; switchport mode access ; ip routing
  2. interface Vlan40 ; ip address 192.168.30.1 255.255.255.0 ; no shutdown
  3. interface Vlan30 ; no ip address ; shutdown
  4. interface Vlan30 ; ip address 192.168.30.1 255.255.255.0 ; no shutdown ; ip routing (global)

Explanation

Correct Answer

D:

A routed SVI for VLAN 30 gives clients in 192.168.30.0/24 a local gateway when VLAN 30 has at least one active Layer 2 port and IP routing is enabled.

Incorrect Answers

A:

IP routing is a global Layer 3-switch feature, not an access-port replacement for an SVI. A switchport does not become the VLAN gateway with this one action.

B:

The gateway SVI is created in VLAN 40, so VLAN 30 clients would not use the intended interface. The VLAN interface number identifies the Layer 2 domain.

C:

An SVI with no IP address and shutdown cannot provide a client default gateway. L3 routing requires an active, addressed interface.

Question 197

At a factory, the security and networking lead is onboarding a new access switch where VLAN 120 does not yet exist; GigabitEthernet1/0/20 will serve an untagged host. What should be configured?

  1. vlan 60 ; name FINANCE_120 ; interface GigabitEthernet1/0/20 ; switchport access vlan 60
  2. interface GigabitEthernet1/0/20 ; switchport trunk allowed vlan 120 ; switchport mode access
  3. interface GigabitEthernet1/0/20 ; description VLAN_120 ; switchport access vlan 60
  4. vlan 120 ; name FINANCE_120 ; interface GigabitEthernet1/0/20 ; switchport mode access ; switchport access vlan 120

Explanation

Correct Answer

D:

This creates VLAN 120 in the local VLAN database and then assigns the access interface to that VLAN. The resulting membership can be verified with show vlan brief.

Incorrect Answers

A:

Creating and assigning VLAN 60 does not put the station into VLAN 120. The VLAN name is only descriptive; its numeric ID controls membership.

B:

Allowed VLAN lists apply to trunk links; this port is explicitly access mode and does not become a member of VLAN 120 merely through a trunk allowance.

C:

An interface description containing 120 has no impact on actual VLAN forwarding. The access VLAN command assigns VLAN 60.

Question 198

At a field-service firm, the on-call technician is auditing an access port GigabitEthernet1/0/39 supposed to be in VLAN 300, not VLAN 60. Which observation directly confirms the assigned access VLAN?

  1. `show interfaces trunk` displays VLAN 300 permitted on an upstream trunk but does not list GigabitEthernet1/0/39's assigned access VLAN.
  2. show vlan brief confirms GigabitEthernet1/0/39 under VLAN 60
  3. show vlan brief confirms GigabitEthernet1/0/39 under VLAN 300
  4. show ip route includes a default route but VLAN 300 has no assigned port

Explanation

Correct Answer

C:

For an access port, show vlan brief can verify membership of GigabitEthernet1/0/39 in VLAN 300; follow with MAC learning or traffic checks for functional forwarding.

Incorrect Answers

A:

An allowed VLAN on a trunk confirms transport eligibility, not the local access VLAN associated with GigabitEthernet1/0/39. The situation calls for evidence of the workstation port's actual membership.

B:

The port listed under VLAN 60 is in the wrong broadcast domain. A VLAN-name description does not change its actual numeric membership.

D:

A Layer 3 default route does not establish Layer 2 access-port placement. The local VLAN must contain the intended endpoint port.

Question 199

A new isolated client VLAN gets its IP gateway from an SVI on a multilayer switch. The DHCP server is on a different routed subnet; clients receive no leases although static-IP clients can reach the gateway. What configuration belongs on the VLAN SVI?

  1. A second switchport access vlan command on the SVI.
  2. An ip helper-address pointing to the reachable DHCP server.
  3. A new STP bridge priority matching the DHCP pool size.
  4. Configure an `ip helper-address` only on the DHCP server-facing switch port rather than the client VLAN SVI.

Explanation

Correct Answer

B:

A relay address forwards supported DHCP broadcast requests from that client subnet toward the remote server. The SVI routing and server scope must also be correct.

Incorrect Answers

A:

An SVI is a routed VLAN interface, not a physical access switchport.

C:

Bridge priority influences spanning-tree election, not cross-subnet DHCP request forwarding.

D:

DHCP broadcasts arrive at the client gateway SVI, which must relay the request toward the off-subnet server.

Question 200

At a research campus, a network administrator has hosts in VLAN 20 and VLAN 150 that can communicate within their own VLAN but not across the subnets. Which solution supplies controlled inter-VLAN connectivity?

  1. Configure switchport access vlan 20 on every trunk port.
  2. Delete VLAN 150 while keeping its hosts and subnet intact.
  3. Rely only on ARP broadcast flooding between VLAN 20 and VLAN 150.
  4. Enable IP routing and provide active gateways for VLAN 20 and VLAN 150.

Explanation

Correct Answer

D:

Inter-VLAN traffic needs a Layer 3 forwarding function and addressed VLAN interfaces or router subinterfaces. With active gateways for 20 and 150, a host can reach the other subnet subject to policy.

Incorrect Answers

A:

Forcing trunks into access mode removes the multi-VLAN carriage needed between switches. It does not create routed interfaces for either subnet.

B:

Deleting VLAN 150 disconnects its hosts from their intended Layer 2 segment rather than providing IP routing.

C:

ARP broadcasts stay within their VLAN domain and cannot perform Layer 3 routing across VLAN 20 and 150.

Cisco Certified Network Associate (CCNA) (200-301) Practice Tests

Purchase Individually

  • Premium File

    760 Questions & Answers
    Last Update: Nov 4, 2026

    $76.99
    $69.99
  • Training Course

    271 Lectures

    $43.99
    $39.99
  • Study Guide

    1969 Pages

    $43.99
    $39.99

SPECIAL OFFER: GET 10% OFF
This is ONE TIME OFFER

You save
10%

Enter Your Email Address to Receive Your 10% Off Discount Code

SPECIAL OFFER: GET 10% OFF

You save
10%

Use Discount Code:

A confirmation link was sent to your e-mail.

Please check your mailbox for a message from support@examlabs.com and follow the directions.

Download Free Demo of VCE Exam Simulator

Experience Avanset VCE Exam Simulator for yourself.

Simply submit your email address below to get started with our interactive software demo of your free trial.

  • Realistic exam simulation and exam editor with preview functions
  • Whole exam in a single file with several different question types
  • Customizable exam-taking mode & detailed score reports