Pass Cisco CCNA 200-301 Exam in First Attempt Easily
Real Cisco CCNA 200-301 Exam Questions, Accurate & Verified Answers As Experienced in the Actual Test!

Verified by experts
3 products

You save $69.98

200-301 Premium Bundle

  • Premium File 760 Questions & Answers
  • Last Update: Nov 4, 2026
  • Training Course 271 Lectures
  • Study Guide 1969 Pages
$79.99 $149.97

Purchase Individually

  • Premium File

    760 Questions & Answers
    Last Update: Nov 4, 2026

    $76.99
    $69.99
  • Training Course

    271 Lectures

    $43.99
    $39.99
  • Study Guide

    1969 Pages

    $43.99
    $39.99

Cisco Certified Network Associate (CCNA) 200-301 Practice Test 21

Question 200

At a research campus, a network administrator has hosts in VLAN 20 and VLAN 150 that can communicate within their own VLAN but not across the subnets. Which solution supplies controlled inter-VLAN connectivity?

  1. Configure switchport access vlan 20 on every trunk port.
  2. Delete VLAN 150 while keeping its hosts and subnet intact.
  3. Rely only on ARP broadcast flooding between VLAN 20 and VLAN 150.
  4. Enable IP routing and provide active gateways for VLAN 20 and VLAN 150.

Explanation

Correct Answer

D:

Inter-VLAN traffic needs a Layer 3 forwarding function and addressed VLAN interfaces or router subinterfaces. With active gateways for 20 and 150, a host can reach the other subnet subject to policy.

Incorrect Answers

A:

Forcing trunks into access mode removes the multi-VLAN carriage needed between switches. It does not create routed interfaces for either subnet.

B:

Deleting VLAN 150 disconnects its hosts from their intended Layer 2 segment rather than providing IP routing.

C:

ARP broadcasts stay within their VLAN domain and cannot perform Layer 3 routing across VLAN 20 and 150.

Question 201

At a customer support center, the on-call technician must attach a normal untagged workstation on GigabitEthernet1/0/8 to existing data VLAN 160. Which IOS configuration establishes the intended membership?

  1. interface GigabitEthernet1/0/8 ; ip address 10.0.0.1 255.255.255.0
  2. interface GigabitEthernet1/0/8 ; switchport mode access ; switchport access vlan 160
  3. interface GigabitEthernet1/0/8 ; switchport mode trunk ; switchport trunk native vlan 160
  4. interface GigabitEthernet1/0/8 ; switchport mode access ; switchport access vlan 90

Explanation

Correct Answer

B:

The port is forced into access mode and placed in VLAN 160, so its untagged endpoint frames join that single data VLAN. VLAN 160 must exist and be active on this switch.

Incorrect Answers

A:

An access switchport in Layer 2 mode is not given a routed IP address by substituting for its VLAN assignment. Gateway addressing belongs on an SVI or routed interface.

C:

Trunk mode permits tagged VLAN traffic and is inappropriate for the stipulated simple non-tagging workstation. Native VLAN configuration does not itself make the port an access port.

D:

This command uses VLAN 90; the endpoint must be attached to VLAN 160. A successful interface configuration in the wrong VLAN still fails segmentation requirements.

Question 202

An IP phone and PC share a switch access port. Voice VLAN is configured correctly, but the uplink queue receives unmarked voice from the phone. Which operational check is most relevant?

  1. Move the PC to the management VLAN and assume voice QoS is fixed.
  2. Change only the voice VLAN number even though phone frames already use the expected VLAN.
  3. Configure a second voice SSID instead of examining tagged phone traffic on the wired access port.
  4. Verify phone QoS marking and the switchport trust/classification policy for the phone-facing interface.

Explanation

Correct Answer

D:

Voice VLAN membership alone does not guarantee the traffic’s CoS or DSCP markings are trusted or preserved. Confirm what the phone sends and where classification occurs.

Incorrect Answers

A:

Changing the PC VLAN does not verify or repair the phone’s QoS marking or trust boundary.

B:

A correctly assigned voice VLAN does not prove frames were marked or trusted for QoS. Inspect the marking/trust boundary instead.

C:

A wireless SSID does not repair DSCP/CoS handling on the wired phone-facing switchport.

Question 203

A router-on-a-stick design deliberately uses VLAN 12 as the untagged native VLAN on an 802.1Q switch trunk. VLAN 12 clients use gateway 10.12.1.1/24 on router interface GigabitEthernet0/0.12. Which router subinterface configuration matches the native-VLAN design?

  1. `interface GigabitEthernet0/0.12 ; encapsulation dot1Q 120 ; ip address 10.12.1.1 255.255.255.0`
  2. `interface GigabitEthernet0/0.12 ; encapsulation dot1Q 12 native ; ip address 10.12.1.1 255.255.255.0`
  3. `interface GigabitEthernet0/0.12 ; encapsulation dot1Q 12 ; ip address 10.12.1.1 255.255.255.0`
  4. `interface GigabitEthernet0/0.12 ; switchport mode access ; switchport access vlan 12`

Explanation

Correct Answer

B:

The `native` keyword tells the routed subinterface to receive untagged native-VLAN 12 frames and send appropriate native traffic. The switch trunk must agree on its native VLAN ID; otherwise the tagging interpretation is inconsistent.

Incorrect Answers

A:

Tag 120 identifies a different VLAN and does not represent the native-VLAN 12 design.

C:

Without `native`, the subinterface expects tagged VLAN 12 frames, whereas the specified switch native VLAN is transmitted untagged.

D:

Routed router subinterfaces use 802.1Q encapsulation and IP addressing, not standard switch access-port commands.

Question 204

VLAN 70 exists and interface Vlan70 is administratively up, but the SVI line protocol remains down. Which switch-side condition most directly explains this on a typical Catalyst implementation?

  1. Keep the only VLAN 70 access port in a forwarding state but change its SVI description text.
  2. No eligible active Layer 2 port or trunk is forwarding VLAN 70 on that switch.
  3. The SVI has the lowest possible IPv4 host address.
  4. The router has already learned more specific static routes.

Explanation

Correct Answer

B:

SVI line protocol typically tracks whether the associated VLAN has an active eligible forwarding Layer 2 member. Check VLAN membership and STP/trunk state.

Incorrect Answers

A:

Changing an interface description cannot bring an SVI line protocol down when an active eligible VLAN 70 forwarding port is present; inspect real Layer 2 state.

C:

An interface IP’s numerical host portion is not what brings an SVI line protocol up.

D:

Routing-table specificity does not supply an active Layer 2 membership for the local SVI.

Question 205

At a school district, the site engineer is onboarding a new access switch where VLAN 15 does not yet exist; GigabitEthernet1/0/30 will serve an untagged host. What should be configured?

  1. vlan 10 ; name FINANCE_15 ; interface GigabitEthernet1/0/30 ; switchport access vlan 10
  2. interface GigabitEthernet1/0/30 ; switchport trunk allowed vlan 15 ; switchport mode access
  3. interface GigabitEthernet1/0/30 ; description VLAN_15 ; switchport access vlan 10
  4. vlan 15 ; name FINANCE_15 ; interface GigabitEthernet1/0/30 ; switchport mode access ; switchport access vlan 15

Explanation

Correct Answer

D:

This creates VLAN 15 in the local VLAN database and then assigns the access interface to that VLAN. The resulting membership can be verified with show vlan brief.

Incorrect Answers

A:

Creating and assigning VLAN 10 does not put the station into VLAN 15. The VLAN name is only descriptive; its numeric ID controls membership.

B:

Allowed VLAN lists apply to trunk links; this port is explicitly access mode and does not become a member of VLAN 15 merely through a trunk allowance.

C:

An interface description containing 15 has no impact on actual VLAN forwarding. The access VLAN command assigns VLAN 10.

Question 206

At a regional hospital, the migration lead is auditing an access port GigabitEthernet1/0/14 supposed to be in VLAN 60, not VLAN 40. Which observation directly confirms the assigned access VLAN?

  1. show ip route includes a default route but VLAN 60 has no assigned port
  2. show vlan brief confirms GigabitEthernet1/0/14 under VLAN 60
  3. `show interfaces trunk` displays VLAN 60 permitted on an upstream trunk but does not list GigabitEthernet1/0/14's assigned access VLAN.
  4. show vlan brief confirms GigabitEthernet1/0/14 under VLAN 40

Explanation

Correct Answer

B:

For an access port, show vlan brief can verify membership of GigabitEthernet1/0/14 in VLAN 60; follow with MAC learning or traffic checks for functional forwarding.

Incorrect Answers

A:

A Layer 3 default route does not establish Layer 2 access-port placement. The local VLAN must contain the intended endpoint port.

C:

An allowed VLAN on a trunk confirms transport eligibility, not the local access VLAN associated with GigabitEthernet1/0/14. The situation calls for evidence of the workstation port's actual membership.

D:

The port listed under VLAN 40 is in the wrong broadcast domain. A VLAN-name description does not change its actual numeric membership.

Question 207

At a school district, the on-call technician must carry VLANs 111 and 432 across one 802.1Q inter-switch connection. Which interface configuration meets this requirement?

  1. switchport mode access ; switchport access vlan 111
  2. shutdown ; switchport trunk allowed vlan 111,432
  3. switchport mode trunk ; switchport trunk allowed vlan 432
  4. switchport mode trunk ; switchport trunk allowed vlan 111,432

Explanation

Correct Answer

D:

A trunk carries tagged VLAN 111 and 432 over one interface. The allowed list names both required broadcast domains.

Incorrect Answers

A:

Access mode carries one regular untagged data VLAN rather than both required tagged VLANs. VLAN 432 would not traverse it.

B:

Administratively shutting down the interface prevents both VLANs from traversing even with a correct allowed list.

C:

The allowed list omits required VLAN 111. A trunk can be operational yet filter frames of a missing VLAN.

Question 208

At a logistics provider, a network operations engineer sees a native VLAN mismatch alert on a trunk whose design specifies native VLAN 622 at both ends. What change resolves the mismatch without dropping tagged VLAN 36?

  1. Make VLAN 36 native only on the downstream switch and delete the others.
  2. Use native VLAN 622 on one end and 331 on the other.
  3. Place the uplink in switchport mode access vlan 622.
  4. Set the trunk native VLAN to 622 on BOTH link ends.

Explanation

Correct Answer

D:

For a conventional 802.1Q trunk, untagged frames are assigned to the configured native VLAN. Both peers must agree on native VLAN 622 to avoid VLAN leakage and mismatch warnings.

Incorrect Answers

A:

Changing a single end does not enforce consistent native handling; the peer may classify untagged frames into a different VLAN.

B:

Native VLAN 622 versus 331 classifies untagged frames differently at each endpoint. That is a mismatch, not a fix.

C:

An access port is not a trunk and cannot carry the distinct required tagged VLANs.

Question 209

Following a trunk cleanup, VLAN 25 users cannot reach a remote switch, while VLAN 10 works. The trunk is up. Its allowed-list now reads only 10,20. Which action best isolates the failure without resetting VLAN 10?

  1. Add VLAN 25 to the trunk allowed list, then verify the VLAN is active and forwarding.
  2. Replace the trunk allowed list with only VLAN 25.
  3. Change the interface duplex to half only.
  4. Apply a host access VLAN command to the trunk uplink.

Explanation

Correct Answer

A:

The operational list excludes VLAN 25. The add operation restores it without overwriting VLAN 10 and 20, then STP/VLAN presence verifies end-to-end reachability.

Incorrect Answers

B:

That would restore VLAN 25 while unnecessarily dropping the known working VLANs from the allowance.

C:

Duplex does not explain why an otherwise healthy trunk transports other VLANs but omits one allowed VLAN.

D:

An access-port assignment does not add VLAN 25 to an operational 802.1Q trunk allowed list.

Question 210

At a hotel, the site engineer is asked to verify an inter-switch 802.1Q trunk carrying VLAN 100. Which observation most directly proves the traffic is allowed at Layer 2?

  1. Confirm `show vlan brief` lists VLAN 100 locally but never inspect the inter-switch trunk operational mode.
  2. Verify show interfaces trunk reports operational trunking and the VLAN in allowed/active lists.
  3. Verify that the switch has any default route, regardless of VLAN carriage.
  4. Verify only the physical interface description says TRUNK.

Explanation

Correct Answer

B:

show interfaces trunk reports trunk state, encapsulation/native settings and which VLANs are actually permitted and active. That directly tests whether VLAN 100 is carried.

Incorrect Answers

A:

Local VLAN presence does not prove that the switch link negotiated 802.1Q tagging or carries VLAN 100 end-to-end.

C:

A default route is a Layer 3 property and cannot prove the Layer 2 trunk carries VLAN 100.

D:

Interface descriptions are administratively assigned text and do not guarantee operational 802.1Q trunking for VLAN 100.

Cisco Certified Network Associate (CCNA) (200-301) Practice Tests

Purchase Individually

  • Premium File

    760 Questions & Answers
    Last Update: Nov 4, 2026

    $76.99
    $69.99
  • Training Course

    271 Lectures

    $43.99
    $39.99
  • Study Guide

    1969 Pages

    $43.99
    $39.99

SPECIAL OFFER: GET 10% OFF
This is ONE TIME OFFER

You save
10%

Enter Your Email Address to Receive Your 10% Off Discount Code

SPECIAL OFFER: GET 10% OFF

You save
10%

Use Discount Code:

A confirmation link was sent to your e-mail.

Please check your mailbox for a message from support@examlabs.com and follow the directions.

Download Free Demo of VCE Exam Simulator

Experience Avanset VCE Exam Simulator for yourself.

Simply submit your email address below to get started with our interactive software demo of your free trial.

  • Realistic exam simulation and exam editor with preview functions
  • Whole exam in a single file with several different question types
  • Customizable exam-taking mode & detailed score reports