Step2Study

Cisco CCNA (200-301) practice questions

254 free questions with answers and explanations.

Practice test
  1. 151.A network administrator is configuring a new Cisco switch using the console port. After successfully logging in, which command should they use to enter global configuration mode?Network Fundamentals
  2. 152.A network administrator is designing a new wireless network for a small office. They want to ensure that client devices have access to both 2.4 GHz and 5 GHz wireless bands from a single access point. Which type of access point should they deploy?Network Fundamentals
  3. 153.A network administrator is designing a new wireless network for a large warehouse. Due to the long aisles and open spaces, the administrator wants to use a type of antenna that focuses its signal in a specific direction to cover a longer distance. Which antenna type should be chosen?Network Fundamentals
  4. 154.A network administrator is configuring a new Cisco router and needs to ensure that all remote management access is secured using SSH. The router should generate its own RSA key pair for this purpose. Which command sequence will generate the necessary cryptographic keys?IP Services
  5. 155.A small office network uses a single Cisco router for internet access. Due to a recent ISP change, the public IP address provided is now 203.0.113.5. The internal network uses 192.168.1.0/24. The router's FastEthernet0/0 interface is connected to the ISP and FastEthernet0/1 to the internal LAN. Which configuration ensures that all internal hosts can access the internet using PAT, assuming an access-list named 'NAT_ACL' permits internal traffic?IP Services
  6. 156.A network administrator is configuring a new switch, SW1, and wants to prevent unnecessary DTP frames from being sent on an access port connected to an end device. Which command sequence would achieve this goal?Network Access
  7. 157.A network technician is troubleshooting a network connectivity issue. They suspect a device is not receiving an IP address from the DHCP server. Which command would the technician use on a Cisco switch to verify if the switch is configured as a DHCP server or DHCP relay agent?IP Services
  8. 158.A network administrator needs to assign a subnet to a new department that will require 60 usable host IP addresses. Which of the following subnet masks, in CIDR notation, would be the smallest block that satisfies this requirement while minimizing wasted addresses?Network Fundamentals
  9. 159.A network administrator is setting up a new network segment and needs to ensure that all hosts automatically receive IP addresses, subnet masks, and default gateway information. The administrator decides to configure a DHCP server on a Cisco router. Which global configuration command is used to enable the DHCP service on the router?IP Services
  10. 160.A network administrator is troubleshooting an issue where internal users cannot resolve external domain names. The router is configured with `ip name-server 8.8.8.8` and `ip domain-lookup`. Which command would the administrator use to verify if the router is successfully resolving domain names?IP Services
  11. 161.A network engineer is troubleshooting an issue where a specific application's traffic from host 192.168.1.5 is experiencing severe delays, despite other traffic types functioning normally. The application uses UDP port 5000. The engineer suspects that a QoS policy might be misconfigured, causing this traffic to be deprioritized or dropped. Which 'show' command would best help the engineer identify if traffic from 192.168.1.5 on UDP port 5000 is being matched by any QoS policy on a Cisco router?IP Services
  12. 162.A network technician needs to connect two Cisco switches directly to each other using a standard Ethernet cable (straight-through). However, both switches are configured to use Auto-MDIX. What will be the outcome of this connection?Network Fundamentals
  13. 163.A network engineer is configuring a new Wireless LAN Controller (WLC) and needs to ensure that it can receive management traffic from Access Points (APs) and also serve client traffic to VLANs 10, 20, and 30. The WLC has a management interface, an AP-manager interface, and multiple dynamic interfaces for client VLANs. Which WLC interface type is primarily responsible for handling CAPWAP control and data plane traffic for access points?Network Access
  14. 164.A network administrator needs to assign IP addresses to 15 hosts on a new LAN segment. They have been allocated the network 192.168.10.0/28. How many usable host IP addresses are available in this subnet?Network Fundamentals
  15. 165.An IPv6-enabled host sends a packet to the address `ff02::1`. What is the purpose of this destination address?Network Fundamentals
  16. 166.A network administrator is configuring a new Cisco Catalyst switch and wants to create VLAN 50 for the Sales department. Which command should be used to achieve this?Network Access
  17. 167.A network administrator is reviewing the syslog messages on a Cisco router and observes the following output: `%SYS-5-CONFIG_I: Configured from console by console` `%LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/1, changed state to up` `%LINK-3-UPDOWN: Interface GigabitEthernet0/0, changed state to down` Which of the following statements is true regarding these syslog messages?IP Services
  18. 168.A network engineer is configuring a new IPv6-enabled router. They need to ensure that the router can automatically discover neighboring IPv6 devices on the same link without manual configuration. Which IPv6 address type facilitates this discovery process?Network Fundamentals
  19. 169.A network administrator is configuring Quality of Service (QoS) on a router to prioritize voice traffic over data traffic. Which field in the IPv4 header is typically used for QoS marking?Network Fundamentals
  20. 170.A network administrator needs to ensure that when a new switch is connected to an existing trunk port on SW1, the new switch automatically negotiates a trunk link. The new switch is also a Cisco Catalyst switch. Which 'switchport mode' configuration should be applied to the existing trunk port on SW1 to achieve this automatic negotiation?Network Access
  21. 171.A network engineer is troubleshooting a client workstation that can ping other devices on its local subnet but cannot reach resources on other subnets, including the internet. The client's IP address, subnet mask, and DNS server settings are all confirmed to be correct. What is the most likely misconfiguration on the client workstation?Network Fundamentals
  22. 172.A network engineer wants to configure Rapid PVST+ on a Cisco Catalyst 3750 switch. The engineer needs to set the STP mode globally for all VLANs. Which of the following commands, executed in global configuration mode, will correctly set the STP mode to Rapid PVST+?Network Access
  23. 173.A network administrator needs to provide power to a new wireless access point located in a ceiling, where no electrical outlets are readily available. The AP supports 802.3at. Which technology can be used to deliver both data and power over a single Ethernet cable?Network Fundamentals
  24. 174.A network administrator needs to configure a Cisco router to always translate the internal IP address 192.168.1.10 to the public IP address 203.0.113.5 for all outbound traffic. Which of the following commands would accomplish this?IP Services
  25. 175.A network technician is configuring an access point (AP) in a new office. The AP needs to support both 2.4 GHz and 5 GHz wireless clients simultaneously. Which type of access point is required?Network Fundamentals
  26. 176.A network administrator wants to connect two Cisco switches directly using a standard Ethernet cable. Both switches are modern, supporting auto-MDIX. Which type of Ethernet cable should be used?Network Fundamentals
  27. 177.A network administrator is configuring a Cisco router to prioritize voice traffic over data traffic. They have identified the voice traffic using an access control list (ACL) and classified it. Which QoS mechanism should be used next to mark this voice traffic with a specific CoS value for prioritization across the network?IP Services
  28. 178.A network administrator is troubleshooting an IPv6-enabled client that cannot reach resources outside its local subnet. The client has an IPv6 address, but a packet capture shows no default gateway being advertised or configured. Which IPv6 address type is typically used by routers to advertise themselves as default gateways on a local segment?Network Fundamentals
  29. 179.A network engineer needs to configure a Cisco router to synchronize its clock with a reliable external time source. Which command sequence would correctly configure the router to use an NTP server at IP address 192.168.1.100?IP Services
  30. 180.A network security audit requires that all management access to network devices be encrypted and secure. Which protocol should be enabled on Cisco devices for remote command-line interface (CLI) access, and which port does it typically use?IP Services
  31. 181.A network administrator is reviewing the configuration of a Cisco Catalyst switch for security best practices. The administrator notices that several access ports are configured with 'switchport mode dynamic auto'. The security policy dictates that ports connected to end devices should not negotiate trunking. Which command should the administrator use on these access ports to prevent them from potentially forming a trunk link, while still allowing them to function as access ports?Network Access
  32. 182.A network administrator is configuring a new Cisco Catalyst 2960 switch. They want to ensure that only VLANs 10, 20, and 30 are allowed to traverse a specific trunk interface, Gi0/1. Which of the following commands, executed on interface Gi0/1, will achieve this requirement?Network Access
  33. 183.A network engineer is configuring a new 802.1Q trunk link between two Cisco Catalyst switches, SW1 and SW2. The engineer wants to ensure that all VLANs, except for VLAN 99 (which is used for management and should not traverse this specific link), are allowed to pass through the trunk. Which of the following commands, when applied to the trunk interface on SW1, will achieve this requirement?Network Access
  34. 184.A network administrator is configuring a Cisco router to forward DNS queries from internal clients to a public DNS server at 8.8.8.8. The internal clients are configured to use the router's internal interface IP address as their DNS server. Which command should be configured on the router to act as a DNS relay agent?IP Services
  35. 185.A network administrator is configuring a Cisco router to translate internal private IPv4 addresses to a single public IPv4 address for external internet access. Which type of NAT is being configured?IP Services
  36. 186.A network administrator is reviewing the output of 'show spanning-tree vlan 10' on a Cisco Catalyst switch. The output for interface Gi0/3 shows 'Role: Desg', 'State: Fwd', and 'Type: P2p'. What does the 'Type: P2p' indicate for this interface?Network Access
  37. 187.A network technician is troubleshooting a newly deployed wireless network. Clients are unable to connect to the SSID 'CorpNet'. The WLC GUI shows that the 'CorpNet' WLAN is mapped to VLAN 10. A 'show interface trunk' command on the switch connected to the WLC shows that VLAN 10 is missing from the allowed VLAN list on the trunk port. Which of the following commands, executed on the switch's trunk interface connected to the WLC, will resolve the issue and allow clients to connect?Network Access
  38. 188.A network engineer is configuring a router to connect to two different subnets: 192.168.1.0/24 and 192.168.2.0/24. Each subnet will be connected to a separate physical interface on the router. What is the minimum number of IP addresses that must be configured on this router to enable basic connectivity between these two subnets?Network Fundamentals
  39. 189.A network engineer is troubleshooting a connectivity issue to a remote server. They suspect that the router's DNS resolution might be failing. To verify the router's ability to resolve a specific hostname, 'example.com', to its IP address, which command would be most appropriate?IP Services
  40. 190.A network administrator is troubleshooting a wireless client connectivity issue. The client is unable to obtain an IP address from the DHCP server. The WLC GUI shows the client associated with an AP, but its status is 'Client IP Learn Failed'. Which of the following is the MOST likely cause of this issue?Network Access
  41. 191.A network administrator is implementing Quality of Service (QoS) on a Cisco router to prioritize voice traffic. The voice traffic is identified by DSCP EF (Expedited Forwarding). The requirement is to ensure that voice traffic is always given preferential treatment and has a strict maximum bandwidth allocation of 5 Mbps on an interface with a total bandwidth of 100 Mbps. Which QoS mechanism and configuration concept would best meet these requirements?IP Services
  42. 192.A network administrator is setting up SNMP on a Cisco router. They need to configure a read-only community string 'public_view' for a specific host 192.168.10.50 and a read-write community string 'private_control' for another host 192.168.10.51. Which command sequence correctly configures these SNMP community strings with proper security?IP Services
  43. 193.A network administrator needs to ensure that a critical server always receives the same IP address from the DHCP server. Which DHCP feature should the administrator configure?Network Fundamentals
  44. 194.A network administrator wants to connect a new workstation to an existing switch using a standard straight-through Ethernet cable. The workstation's network interface card (NIC) and the switch port both support Auto-MDIX. What will be the result of this connection?Network Fundamentals
  45. 195.A network engineer is troubleshooting a client workstation that cannot access resources on a different subnet but can communicate with other devices on its local subnet. The `ipconfig` output shows an IP address, subnet mask, and a default gateway address. What is the MOST likely cause of the issue?Network Fundamentals
  46. 196.Refer to the following router output: ``` Router# show ip nat translations Pro Inside global Inside local Outside local Outside global icmp 203.0.113.10:1 10.0.0.1:1 198.51.100.5:1 198.51.100.5:1 icmp 203.0.113.10:2 10.0.0.2:2 198.51.100.6:2 198.51.100.6:2 tcp 203.0.113.11:1024 10.0.0.3:1024 192.0.2.1:80 192.0.2.1:80 ``` Which statement about the NAT configuration is true?IP Services
  47. 197.A network engineer is troubleshooting a connection between two routers. The 'show cdp neighbors detail' command output shows that RouterA's local interface GigabitEthernet0/1 is connected to RouterB's remote interface GigabitEthernet0/0. What information does CDP provide about the remote device in this scenario?Network Fundamentals
  48. 198.A network engineer is troubleshooting an EtherChannel between two Catalyst switches, SW1 and SW2. The engineer suspects an issue with the LACP negotiation. On SW1, interfaces Gi0/1 and Gi0/2 are configured with 'channel-group 1 mode active'. On SW2, interfaces Gi0/1 and Gi0/2 are configured with 'channel-group 1 mode desirable'. What is the expected outcome of this configuration?Network Access
  49. 199.A network administrator needs to verify the current Spanning Tree Protocol (STP) mode configured on a Cisco Catalyst switch, specifically for VLAN 10. The administrator also wants to see the root bridge information for that VLAN. Which of the following commands would provide this information?Network Access
  50. 200.A network engineer needs to configure a Cisco router to automatically obtain an IP address, subnet mask, and default gateway from a DHCP server. Which command should be configured on the router's interface that connects to the DHCP server?IP Services