Cisco Certification
60 practice questions with correct answers and detailed explanations. Use this guide to review concepts before taking the practice exam.
The Cisco CCNA (200-301) certification validates professional expertise in Cisco technologies. This study guide covers all 60 practice questions from our 200-301 practice test, complete with correct answers and explanations to help you understand each concept thoroughly.
Review each question and explanation below, then test yourself with the full interactive practice exam to measure your readiness.
Which OSI layer is responsible for logical addressing and routing decisions?
Layer 3 (Network layer) handles logical addressing via IP addresses and makes routing decisions to forward packets across networks.
What is the primary purpose of VLAN tagging using 802.1Q?
802.1Q tagging inserts a VLAN ID into Ethernet frames, allowing switches to maintain separate broadcast domains and control traffic between VLANs.
Which spanning tree protocol variant provides the fastest convergence time?
RSTP (802.1w) converges in seconds compared to STP's minutes by using explicit handshakes and faster failure detection mechanisms.
In a switched network, what is the purpose of PortFast on a Cisco switch?
PortFast bypasses STP listening and learning states, allowing end devices like PCs to access the network immediately without waiting for STP convergence.
Which protocol is used to dynamically assign IP addresses to devices on a network?
DHCP (Dynamic Host Configuration Protocol) automatically assigns IP addresses, subnet masks, default gateways, and other network parameters to client devices.
What does the command 'ip route 0.0.0.0 0.0.0.0 192.168.1.1' accomplish?
The 0.0.0.0/0 destination and mask represent all possible destinations, making this a default route that matches any traffic not covered by more specific routes.
Which of the following best describes the purpose of the TCP three-way handshake?
The SYN, SYN-ACK, and ACK exchange establishes initial sequence numbers and confirms both endpoints are ready for reliable, ordered data transfer.
What is the primary difference between stateless and stateful firewalls?
Stateful firewalls maintain connection tables to identify established sessions and permit return traffic accordingly, while stateless firewalls apply rules to each packet without context.
In NAT (Network Address Translation), what is the primary purpose of overloading?
NAT overloading (also called PAT - Port Address Translation) maps multiple internal IP addresses to a single external IP by using different port numbers to distinguish connections.
Which command would you use to view the routing table on a Cisco router?
'show ip route' displays all known routes including connected networks, static routes, and dynamically learned routes from routing protocols.
What is the metric used by OSPF to determine the best path?
OSPF uses cost as its metric, calculated by default as 100 Mbps divided by the interface bandwidth, favoring higher-speed links.
Which of the following is a characteristic of BGP routing?
BGP (Border Gateway Protocol) is the primary EGP that manages routing between different autonomous systems on the internet, using attributes like AS path for decisions.
What does EIGRP stand for and what type of protocol is it?
EIGRP is a hybrid protocol that maintains neighbor relationships like link-state protocols but makes routing decisions based on distance-vector concepts using DUAL algorithm.
In a network running OSPF, what is the purpose of the designated router (DR)?
The DR acts as a hub in multi-access segments (like Ethernet), receiving LSAs from all routers and flooding them out, reducing redundant transmissions.
Which of the following is true about IPv6 link-local addresses?
IPv6 link-local addresses with fe80::/10 prefix are automatically generated and used for local network segment communication, neighbor discovery, and device-to-device communication.
What is the purpose of the IPv6 neighbor discovery protocol?
NDP uses ICMPv6 to perform address resolution (replacing ARP), router discovery, and other essential network functions in IPv6 networks.
In the context of wireless networking, what does SSID represent?
SSID is the human-readable name of a wireless network that is broadcast in beacon frames, allowing devices to discover and connect to the network.
Which wireless security standard provides the strongest encryption for WLAN authentication?
WPA2 using AES-CCMP encryption is the industry standard for wireless security, providing strong encryption and authentication mechanisms superior to earlier WEP and WPA standards.
What is the maximum cable length for a single Cat6 UTP Ethernet segment without a repeater?
The IEEE 802.3 standard specifies a maximum of 100 meters for Cat5e and Cat6 UTP cable segments to maintain signal integrity and prevent attenuation.
Which layer 2 protocol is used for discovering the DHCP server on a local network segment?
A DHCP client sends a broadcast frame to the local network segment requesting IP configuration; DHCP uses UDP and broadcasts use layer 2 destination MAC of ff:ff:ff:ff:ff:ff.
In a network using RADIUS for authentication, what is the primary role of the RADIUS server?
RADIUS (Remote Authentication Dial-In User Service) is an authentication protocol where the RADIUS server validates user credentials submitted by a network access server.
What is the primary purpose of implementing access control lists (ACLs) on a router?
ACLs examine source/destination IP addresses, ports, and protocols to permit or deny traffic, serving as a fundamental security tool for network access control.
Which statement best describes the function of a network access control (NAC) solution?
NAC solutions verify that connecting devices comply with security policies (antivirus updates, patches, etc.) before allowing network access, preventing non-compliant devices from connecting.
What is the primary advantage of using a modular network design approach?
Modular design with core, distribution, and access layers enables independent scaling, simplified troubleshooting, and easier implementation of features at appropriate tiers.
In network management, what is the primary function of the Syslog protocol?
Syslog is a standard protocol that allows network devices to send log messages to a centralized server, enabling administrators to monitor and troubleshoot issues across the network.
Which OSI layer is responsible for routing packets between networks?
The Network Layer (Layer 3) is responsible for logical addressing and routing packets between different networks using IP addresses.
What is the primary purpose of VLAN tagging using 802.1Q?
802.1Q tagging adds a 4-byte tag to Ethernet frames, allowing switches to identify and forward frames to the correct VLAN based on this tag.
Which of the following best describes the function of the TCP three-way handshake?
The three-way handshake (SYN, SYN-ACK, ACK) establishes a reliable TCP connection and synchronizes sequence numbers between client and server.
A network administrator needs to segment a Class B network into subnets with a maximum of 254 usable host addresses per subnet. What subnet mask should be used?
A /24 subnet mask (255.255.255.0) provides 256 total addresses with 254 usable hosts per subnet, which exactly meets the requirement.
Which protocol operates at Layer 2 and is used to prevent switching loops in a network?
RSTP operates at Layer 2 and prevents switching loops by blocking redundant paths while maintaining network redundancy.
What is the default administrative distance for OSPF routes?
OSPF has a default administrative distance of 110, which is preferred over RIP (120) but less preferred than EIGRP (90).
Which of the following statements about NAT (Network Address Translation) is correct?
PAT enables many-to-one translation by multiplexing multiple internal addresses to a single external IP using different port numbers.
What is the main advantage of using EIGRP over RIP in a large enterprise network?
EIGRP uses incremental updates and DUAL algorithm to achieve faster convergence and lower bandwidth consumption compared to RIP's periodic full-table broadcasts.
A switch receives a frame on port Fa0/1 with a source MAC address that is not in its MAC address table. What action will the switch take?
Switches dynamically learn MAC addresses from source addresses in incoming frames and store them in the MAC address table for future forwarding decisions.
Which command would you use to verify the current running configuration on a Cisco router?
The 'show running-config' command displays the active configuration currently in RAM on a Cisco device.
What is the purpose of the DHCP DORA process?
DORA (Discover, Offer, Request, Acknowledge) is the four-step DHCP process where a client obtains an IP address lease from a DHCP server.
A network administrator implements access control lists (ACLs) on a router interface. On which side of the interface would an inbound ACL typically be applied to filter traffic entering the router?
An inbound ACL is applied before the routing lookup decision, allowing early filtering of traffic entering an interface before the router determines where to forward it.
Which of the following is a characteristic of a hierarchical network design model?
Hierarchical design organizes networks into layers—core (fast backbone), distribution (policies/aggregation), and access (user connectivity)—improving scalability and reducing complexity.
What does the concept of 'convergence time' refer to in the context of routing protocols?
Convergence time is the period needed for routing protocols to detect topology changes and update all routing tables to reflect the new network state.
In a switched network, what is the primary reason for implementing Spanning Tree Protocol (STP)?
STP prevents Layer 2 loops by selecting a root bridge and blocking redundant ports, ensuring a loop-free topology while preserving path redundancy.
Which statement accurately describes the difference between a standard ACL and an extended ACL?
Standard ACLs (numbered 1-99) filter only on source IP, while extended ACLs (numbered 100-199) provide more granular control by filtering on source IP, destination IP, protocols, and port numbers.
A router receives a packet destined for a network that is not in its routing table. What happens to this packet?
When a destination network is not in the routing table, the router uses the default route (0.0.0.0/0) if configured; otherwise, it drops the packet.
Which of the following accurately describes the function of the Address Resolution Protocol (ARP)?
ARP resolves Layer 3 IP addresses to Layer 2 MAC addresses, allowing devices to locate each other on the same broadcast domain.
In the context of IPv6, what is the purpose of the fe80::/10 address range?
Link-local addresses (fe80::/10) are automatically configured on IPv6 interfaces and enable communication within the same link without requiring routing or DHCPv6.
What is the primary function of the Transport Layer (Layer 4) in the OSI model?
Layer 4 provides end-to-end communication with services such as reliability (TCP), flow control, and multiplexing for multiple applications.
A network uses EIGRP as its routing protocol. An administrator needs to ensure that a specific router becomes the EIGRP feasible successor for a particular route. Which parameter would be most appropriate to adjust?
EIGRP's composite metric is based on bandwidth and delay; increasing bandwidth or decreasing delay lowers the metric, making a route more attractive and potentially a feasible successor.
Which of the following best describes what happens during the STP election process?
The switch with the lowest bridge ID (priority + MAC address) is elected root bridge; other switches then select their root ports based on lowest cost to reach the root.
What does CSRF (Cross-Site Request Forgery) protection in web applications typically involve?
CSRF protection uses anti-forgery tokens and same-site cookie attributes to ensure that requests come from the legitimate user's session, not from malicious third-party sites.
Which routing protocol uses the Bellman-Ford algorithm to calculate the shortest path?
RIP uses the Bellman-Ford algorithm and relies on hop count as its metric, making it simple but limited to 15 hops maximum.
In a network where Frame Relay is deployed, what is the purpose of the DLCI (Data Link Connection Identifier)?
The DLCI is a local identifier that maps logical Frame Relay virtual circuits (PVCs or SVCs) between a DTE and DCE, similar to VLAN IDs in switched Ethernet networks.
Which command is used to configure a static route on a Cisco router?
The correct IOS command syntax for configuring a static route is 'ip route' followed by the destination network, subnet mask, and next-hop address or exit interface.
In OSPF, what is the purpose of the designated router (DR) and backup designated router (BDR)?
The DR and BDR are elected on multi-access networks to become the central point of communication, reducing the number of adjacencies and LSA floods from n(n-1)/2 to n relationships.
Which of the following statements best describes the difference between TCP and UDP?
TCP establishes a connection before sending data and ensures all packets arrive in order, while UDP sends datagrams without connection establishment and does not guarantee delivery or ordering.
A network administrator is configuring VLAN trunking between two switches. The administrator wants to tag all VLANs except VLAN 1. Which command would accomplish this on a trunk port?
The VLAN range 2-4094 includes all usable VLANs except VLAN 1, which is the management VLAN and cannot be removed from the trunk; using 'allowed vlan' restricts which VLANs are carried on the trunk.
During a traceroute command execution, the administrator receives asterisks (*) for all hops. What is the most likely cause?
Asterisks indicate that ICMP Time Exceeded responses from intermediate hops are being filtered or not returned, commonly due to firewall policies or router configurations that block these diagnostic messages.
An organization uses subnetting to divide a Class B network. If they need 200 subnets, what is the minimum subnet mask required?
To create 200 subnets from a Class B network (/16), you need at least 8 host bits for subnetting (2^8 = 256 subnets), resulting in a /24 mask; however, /25 is the minimum that safely accommodates 200 subnets with some overhead.
Which spanning tree protocol version provides faster convergence time and is primarily used in modern deployments?
RSTP converges in seconds compared to STP's minutes, uses faster port transitions through proposal/agreement mechanism, and is backward compatible with legacy STP implementations.
A network uses EIGRP for routing. A router receives two routes to the same destination: one with a feasible distance of 20480000 and another with a reported distance of 20480000. If the feasible distance threshold is 20480256, what action will EIGRP take?
Since the reported distance (20480000) is less than the feasible distance threshold (20480256), the second route qualifies as a feasible successor and is retained as a backup without being added to the active routing table.
Which command displays the MAC address table on a Cisco switch?
The correct IOS command to display learned MAC addresses and their associated switch ports is 'show mac-address-table'; this helps troubleshoot switching and VLAN issues.
A BGP router receives four routes to the same destination network from different neighbors. All routes have the same AS path length. What BGP attribute will be examined next to determine the best path?
After AS path length, BGP examines local preference for iBGP routes (highest wins) and multi-exit discriminator (MED) for eBGP routes (lowest wins) to determine the preferred path.
You've reviewed all 60 questions. Take the interactive practice exam to simulate the real test environment.
▶ Start Practice Exam — Free