Pass Cisco CCNA 200-301 Exam in First Attempt Easily
Real Cisco CCNA 200-301 Exam Questions, Accurate & Verified Answers As Experienced in the Actual Test!

Verified by experts
3 products

You save $69.98

200-301 Premium Bundle

  • Premium File 760 Questions & Answers
  • Last Update: Nov 4, 2026
  • Training Course 271 Lectures
  • Study Guide 1969 Pages
$79.99 $149.97

Purchase Individually

  • Premium File

    760 Questions & Answers
    Last Update: Nov 4, 2026

    $76.99
    $69.99
  • Training Course

    271 Lectures

    $43.99
    $39.99
  • Study Guide

    1969 Pages

    $43.99
    $39.99

Cisco Certified Network Associate (CCNA) 200-301 Practice Test 28

Question 270

At a media studio, a network operations engineer wants the authorized distribution pair to remain Rapid PVST+ root for VLAN 196 even if an access-layer switch advertises a superior bridge ID. Which safeguard fits?

  1. Enable BPDU guard on every link connecting the authorized core root bridges.
  2. Disable STP on all trunks and depend on VLAN tagging to prevent loops.
  3. Enable PortFast on every distribution-to-core trunk.
  4. Enable root guard on a downstream designated port where a superior bridge must never appear.

Explanation

Correct Answer

D:

Root guard keeps an unexpected superior BPDU from changing the intended root hierarchy on the protected designated segment. It can place the receiving port into root-inconsistent state.

Incorrect Answers

A:

BPDU guard is appropriate on endpoint edges, not every legitimate switch-to-switch link carrying BPDUs.

B:

802.1Q VLAN tags do not stop Layer 2 loops within each VLAN.

C:

PortFast bypasses some transition behavior on edge ports; core trunks should participate normally in STP.

Question 271

At a satellite office, the migration lead has a redundant inter-switch link in VLAN 126. A failure can make a blocked/root port stop receiving BPDUs without losing electrical carrier. Which STP feature best reduces loop risk?

  1. Use PortFast on the transit link to replace missing BPDUs.
  2. Set every port to the same root priority and disable loop detection.
  3. Enable DHCP snooping as the only defense against BPDU loss.
  4. Use loop guard on a non-designated link where expected BPDUs might disappear.

Explanation

Correct Answer

D:

Loop guard helps prevent a root/alternate port from transitioning incorrectly to forwarding when superior BPDUs stop arriving on VLAN 126.

Incorrect Answers

A:

PortFast is intended for true edge connections, not to solve a transit-link BPDU interruption.

B:

Identical priorities and absent STP protection do not preserve topology safety after BPDU loss.

C:

DHCP snooping protects address assignment, not bridge control-plane BPDU receipt.

Question 272

At a payment processor, a network administrator reviews Rapid PVST+ port roles in VLAN 48 after a topology change. Which statement accurately distinguishes a root port from a designated port?

  1. A designated port forwards the best BPDU toward its segment; a root port is the non-root switch best path toward the root.
  2. Every switch has a root port even if it is itself the elected root bridge.
  3. An alternate port is always forwarding user frames regardless of topology.
  4. A disabled port wins the root election solely due to its physical interface number.

Explanation

Correct Answer

A:

Rapid PVST+ computes roles per VLAN 48: the root bridge has designated forwarding ports, while each non-root bridge chooses one best root port. Alternate ports offer blocked standby paths.

Incorrect Answers

B:

The root bridge has no root port because its own root path cost is zero.

C:

An alternate role supplies redundancy and does not forward normal user traffic while discarding.

D:

Port status and root bridge election use bridge/path IDs, not a simple physical interface number comparison.

Question 273

At a bank branch, the branch support lead is validating Rapid PVST+ convergence for VLAN 188 and inspects the discarding, learning and forwarding states. Which state description is correct?

  1. Learning disables source-MAC learning and forwards every client packet.
  2. In Rapid PVST+, discarding does not forward user frames, learning builds MAC entries, and forwarding passes traffic.
  3. Forwarding is a state where BPDUs are forbidden and MAC learning stops.
  4. Discarding forwards all ordinary unicast and broadcast frames while building the MAC table.

Explanation

Correct Answer

B:

RSTP states separate discarding, learning and forwarding; frame forwarding occurs in the forwarding state, and learning can build a MAC table before traffic forwarding for VLAN 188.

Incorrect Answers

A:

Learning intentionally observes source MACs but does not yet forward ordinary user frames.

C:

A forwarding port continues normal STP BPDU participation and can learn MACs.

D:

Discarding prevents normal data forwarding; that is the basis for loop prevention.

Question 274

At an enterprise data center, a network administrator must identify the Rapid PVST+ root for VLAN 45; all listed switches are on the same Layer 2 topology and no superior external BPDU exists. Which switch wins?

  1. SW-2: priority 32768, MAC 00:1a:2b:01:2e:40
  2. SW-4: priority 12288, MAC 00:1a:2b:03:30:40
  3. SW-3: priority 4096, MAC 00:1a:2b:02:2f:40
  4. SW-1: priority 24576, MAC 00:1a:2b:00:2d:40

Explanation

Correct Answer

C:

SW-3 has bridge priority 4096; root selection compares bridge ID priority first and MAC as tie-breaker. It wins because this is the lowest priority in the presented candidates.

Incorrect Answers

A:

SW-2 has bridge priority 32768; root selection compares bridge ID priority first and MAC as tie-breaker. The winning bridge has lower priority 4096, so this cannot be root despite its MAC value.

B:

SW-4 has bridge priority 12288; root selection compares bridge ID priority first and MAC as tie-breaker. The winning bridge has lower priority 4096, so this cannot be root despite its MAC value.

D:

SW-1 has bridge priority 24576; root selection compares bridge ID priority first and MAC as tie-breaker. The winning bridge has lower priority 4096, so this cannot be root despite its MAC value.

Question 275

At a biotech lab, an implementation partner examines four ports on a non-root Rapid PVST+ switch for VLAN 192. Their received BPDUs identify the same root bridge but yield different total path costs. Which port becomes the root port?

  1. Port Gi1/0/4 with total root path cost 35
  2. Port Gi1/0/3 with total root path cost 29
  3. Port Gi1/0/1 with total root path cost 19
  4. Port Gi1/0/2 with total root path cost 23

Explanation

Correct Answer

C:

Root-port selection begins with the lowest accumulated path cost toward the root bridge. Gi1/0/1 has cost 19; it is preferred, assuming equal root IDs and no other superior tie-breakers.

Incorrect Answers

A:

Root-port selection begins with the lowest accumulated path cost toward the root bridge. Gi1/0/4 has cost 35; cost 19 is better than 35, so this path is not selected.

B:

Root-port selection begins with the lowest accumulated path cost toward the root bridge. Gi1/0/3 has cost 29; cost 19 is better than 29, so this path is not selected.

D:

Root-port selection begins with the lowest accumulated path cost toward the root bridge. Gi1/0/2 has cost 23; cost 19 is better than 23, so this path is not selected.

Question 276

Access port Gi1/0/20 in VLAN 130 is configured for PortFast and BPDU guard. An unauthorized mini-switch is connected and begins sending BPDUs. Which immediate reaction is expected under the configured guard policy?

  1. Port Gi1/0/20 becomes the root port because BPDU guard always promotes BPDUs.
  2. The port changes from access to trunk without configuration because a BPDU was received.
  3. VLAN 130 is automatically merged with VLAN 1 to avoid losing client traffic.
  4. Port Gi1/0/20 becomes err-disabled upon receiving a BPDU, protecting VLAN 130.

Explanation

Correct Answer

D:

On a BPDU-guarded PortFast edge Gi1/0/20, unexpected BPDUs normally trigger err-disable to avoid unintended switching loops in VLAN 130. The underlying cause must be addressed before recovery.

Incorrect Answers

A:

BPDU guard is an edge protection, not an STP root-port promotion mechanism.

B:

A received BPDU does not automatically authorize IOS to transform an access port into a trunk.

C:

The guard does not change VLAN database segmentation to merge different broadcast domains.

Question 277

Four switches start Rapid PVST+ on VLAN 131; no root has yet been elected and no external BPDU is superior. Which candidate has the best bridge priority and becomes root?

  1. Switch C priority 28672 for VLAN 131
  2. Switch B priority 0 for VLAN 131
  3. Switch A priority 20480 for VLAN 131
  4. Switch D priority 24576 for VLAN 131

Explanation

Correct Answer

B:

The bridge with the lowest STP priority wins the root election for VLAN 131, with MAC used only as a tie-break. 0 is the lowest listed priority.

Incorrect Answers

A:

The bridge with the lowest STP priority wins the root election for VLAN 131, with MAC used only as a tie-break. This 28672 is higher than winning priority 0.

C:

The bridge with the lowest STP priority wins the root election for VLAN 131, with MAC used only as a tie-break. This 20480 is higher than winning priority 0.

D:

The bridge with the lowest STP priority wins the root election for VLAN 131, with MAC used only as a tie-break. This 24576 is higher than winning priority 0.

Question 278

A non-root Rapid PVST+ switch has four possible uplinks toward the same VLAN 132 root. Each receives the same root bridge ID. Which port is chosen based on the measured total costs?

  1. Gi1/0/2 total root path cost 32 on VLAN 132
  2. Gi1/0/4 total root path cost 27 on VLAN 132
  3. Gi1/0/3 total root path cost 20 on VLAN 132
  4. Gi1/0/1 total root path cost 4 on VLAN 132

Explanation

Correct Answer

D:

Root-port selection chooses the lowest total path cost among ports advertising the same root bridge. This path cost 4 is the least.

Incorrect Answers

A:

Root-port selection chooses the lowest total path cost among ports advertising the same root bridge. The alternative cost 4 is lower than 32.

B:

Root-port selection chooses the lowest total path cost among ports advertising the same root bridge. The alternative cost 4 is lower than 27.

C:

Root-port selection chooses the lowest total path cost among ports advertising the same root bridge. The alternative cost 4 is lower than 20.

Question 279

An access port Gi1/0/23 is configured for PortFast and receives an unexpected BPDU from an attached unmanaged switch. The operator wants BPDU guard only on this interface, not as a switchwide default. Which IOS command meets that scope?

  1. `spanning-tree portfast` alone.
  2. `spanning-tree guard root` on the access port.
  3. `spanning-tree bpduguard enable` under interface Gi1/0/23.
  4. `spanning-tree bpdufilter enable` on the access port.

Explanation

Correct Answer

C:

Interface-level BPDU guard protects this specific access port, sending it to err-disabled if a BPDU arrives. A global default would affect all eligible PortFast access ports.

Incorrect Answers

A:

PortFast accelerates the edge transition but does not by itself guarantee err-disable on an unexpected BPDU.

B:

Root guard blocks superior-root influence but is not the explicit BPDU guard trigger requested for any BPDU.

D:

BPDU filtering suppresses protocol BPDUs and can conceal an unauthorized switch, rather than err-disabling the port on receipt.

Question 280

In VLAN 134, SW-A and SW-B both advertise configured bridge priority 4096. Their MAC addresses are SW-A 00:11:22:00:00:20 and SW-B 00:11:22:00:00:05. No switch advertises a lower priority. Which switch becomes the Rapid PVST+ root and why?

  1. SW-A, because a higher MAC is a better bridge ID.
  2. SW-B, because its MAC address is lower when the priority component ties.
  3. Both switches become root for VLAN 134.
  4. The switch with the larger number of access ports becomes root.

Explanation

Correct Answer

B:

STP compares full bridge IDs: the priority (including VLAN system ID) ranks first; with equal priority, the numerically lower MAC address wins the root election.

Incorrect Answers

A:

When priorities tie, STP selects the smaller MAC address, not the larger one.

C:

A single spanning-tree instance has one root bridge; an ID tie is resolved deterministically.

D:

Port count is not part of the bridge ID comparison.

Cisco Certified Network Associate (CCNA) (200-301) Practice Tests

Purchase Individually

  • Premium File

    760 Questions & Answers
    Last Update: Nov 4, 2026

    $76.99
    $69.99
  • Training Course

    271 Lectures

    $43.99
    $39.99
  • Study Guide

    1969 Pages

    $43.99
    $39.99

SPECIAL OFFER: GET 10% OFF
This is ONE TIME OFFER

You save
10%

Enter Your Email Address to Receive Your 10% Off Discount Code

SPECIAL OFFER: GET 10% OFF

You save
10%

Use Discount Code:

A confirmation link was sent to your e-mail.

Please check your mailbox for a message from support@examlabs.com and follow the directions.

Download Free Demo of VCE Exam Simulator

Experience Avanset VCE Exam Simulator for yourself.

Simply submit your email address below to get started with our interactive software demo of your free trial.

  • Realistic exam simulation and exam editor with preview functions
  • Whole exam in a single file with several different question types
  • Customizable exam-taking mode & detailed score reports