Cisco CCNA (200-301) practice questions
254 free questions with answers and explanations.
- 201.A network administrator needs to verify the current Spanning Tree Protocol (STP) mode configured on a Cisco Catalyst switch, specifically for VLAN 10. The administrator also wants to see the root bridge information for that VLAN. Which of the following commands would provide this information?Network Access
- 202.A network engineer needs to configure a Cisco router to automatically obtain an IP address, subnet mask, and default gateway from a DHCP server. Which command should be configured on the router's interface that connects to the DHCP server?IP Services
- 203.A small office network uses a single Cisco router for all routing functions. The router has two interfaces: GigabitEthernet0/0 connected to the internal LAN (192.168.1.0/24) and GigabitEthernet0/1 connected to the ISP's network for internet access (DHCP assigned). Which of the following statements about this router's function is most accurate?Network Fundamentals
- 204.A network engineer is configuring a Cisco router to use SSH for secure remote access. After generating RSA keys and configuring local user accounts, the engineer tests the SSH connection but it fails. Upon checking the configuration, they find that the VTY lines are configured with 'transport input telnet'. Which command should replace 'transport input telnet' to enable SSH access on the VTY lines?IP Services
- 205.Which of the following commands is used to verify the VLAN membership of a specific port on a Cisco Catalyst switch?Network Access
- 206.A network administrator needs to provide internet access to a small branch office using a single public IPv4 address. Multiple internal devices in the office require access to external resources. Which networking technology will allow these multiple internal devices to share a single public IP address?Network Fundamentals
- 207.A network administrator is troubleshooting an issue where several internal hosts are failing to register their DNS records automatically. The DHCP server is a Cisco IOS router. Which command should the administrator use to verify if the router is configured to update DNS records on behalf of its clients?IP Services
- 208.A network administrator is troubleshooting connectivity issues for a host with the IP address 192.168.1.10/25. The host can communicate with other devices within its own subnet (192.168.1.1-192.168.1.126) but cannot reach a server at 192.168.1.130. What is the most likely cause?Network Fundamentals
- 209.A network administrator needs to configure a Cisco router to periodically send its running configuration to a TFTP server at 192.168.1.100. The configuration should be saved as 'router_config.cfg' on the TFTP server, and this backup should occur every night at 2:00 AM. Which set of commands would achieve this automation?IP Services
- 210.A network engineer wants to configure a Cisco router to dynamically assign IP addresses to hosts on a new LAN segment. Which feature should they enable on the router?Network Fundamentals
- 211.A network administrator is troubleshooting an issue where a newly deployed VoIP phone is not registering with the call manager. The phone is configured to use DHCP and relies on Option 150 to get the TFTP server address for its configuration files. Which command would the administrator use on the Cisco DHCP server to verify if Option 150 is being correctly provisioned?IP Services
- 212.A network engineer is configuring a new Cisco Catalyst switch, SW1, and wants to enable Link Layer Discovery Protocol (LLDP) globally to discover neighboring devices, including non-Cisco equipment. Which command should be used to enable LLDP globally on SW1?Network Access
- 213.A network administrator is configuring Quality of Service (QoS) on a Cisco router to prioritize voice traffic over data traffic. Which IPv4 header field is commonly used to mark packets for QoS prioritization?Network Fundamentals
- 214.A network technician is configuring an EtherChannel using LACP between two Cisco Catalyst switches, SW1 and SW2. The technician wants to ensure that the EtherChannel forms only if both sides actively attempt to negotiate the channel. Both Gi0/1 and Gi0/2 on SW1 are intended to be part of this EtherChannel. Which LACP mode should be configured on the interfaces Gi0/1 and Gi0/2 of SW1?Network Access
- 215.A network technician is installing a new wireless access point (AP) in a warehouse. The AP needs to provide both 2.4 GHz and 5 GHz wireless connectivity to support a variety of client devices. Which type of access point should the technician select?Network Fundamentals
- 216.A network engineer wants to configure a Cisco switch to send system messages (syslog) to a central syslog server at IP address 192.168.1.200. The engineer also wants to ensure that critical messages (level 2) are logged to the console. Which set of commands achieves this configuration?IP Services
- 217.A network administrator is configuring a DHCP server on a Cisco router. They need to exclude the first 10 IP addresses in the 192.168.1.0/24 subnet from being assigned by DHCP. Which command or set of commands accomplishes this?IP Services
- 218.A network engineer is troubleshooting a connectivity issue on a Cisco router. They want to view the routing table to verify learned routes and next-hop information. Which command should they use?Network Fundamentals
- 219.A network engineer is configuring a Cisco router for Network Address Translation (NAT) to allow internal users to access the internet. They want to translate multiple internal private IP addresses to a single public IP address using port numbers. Which type of NAT is being configured?IP Services
- 220.A network administrator is reviewing the output of `show ip interface brief` on a Cisco router and sees the following for an interface: `GigabitEthernet0/1 192.168.1.1 YES manual up down`. What does the 'down' status indicate for the interface?Network Fundamentals
- 221.A network engineer wants to ensure that all network devices in a branch office synchronize their clocks with the corporate NTP server located at 10.1.1.1, which operates in stratum 3. The branch office router should act as an NTP client to the corporate server and then serve as an NTP authoritative server for other devices in the branch, but only if it successfully synchronizes with the corporate server. Which command sequence achieves this goal?IP Services
- 222.A network administrator needs to enable SNMP on a Cisco router to allow a network management system (NMS) to monitor its performance and status. The NMS should only be able to read system information and should not be able to make configuration changes. Which command snippet correctly configures this requirement?IP Services
- 223.A network engineer is configuring a new Cisco router. After connecting to the console port, they see a prompt like `Router>`. To access configuration commands for interfaces, routing protocols, and other global settings, what is the next command mode the engineer must enter?Network Fundamentals
- 224.A network administrator is managing several Cisco devices and wants to ensure that all devices have their configurations backed up nightly to a central server using TFTP. Which protocol does TFTP use for transport, and what is its default port number?IP Services
- 225.An administrator is observing network performance issues, specifically high latency for real-time applications. They suspect that Network Address Translation (NAT) is contributing to the delay. Which command can the administrator use on a Cisco router to view the active NAT translations and troubleshoot potential bottlenecks?IP Services
- 226.A network engineer needs to configure a Cisco router to synchronize its clock with a reliable external time source. Which command sequence would correctly configure the router to use an NTP server at IP address 192.168.1.100?IP Services
- 227.A network administrator is configuring OSPFv2 on a router. The router has an interface GigabitEthernet0/0 with the IP address `192.168.50.1/27`. To enable OSPF on this interface and include it in area 0, which `network` command should be used under the OSPF router configuration mode?IP Connectivity
- 228.A network engineer issues the `show ip route` command on a router and observes the following entry: `O 172.16.1.0/24 [110/2] via 10.0.0.1, 00:00:25, GigabitEthernet0/0` What does the value `2` in `[110/2]` represent for this OSPF route?IP Connectivity
- 229.A network administrator is configuring OSPFv2 on a router. The router has three active interfaces: Loopback0 (IP 192.168.1.1/32), GigabitEthernet0/0 (IP 10.0.0.1/24), and GigabitEthernet0/1 (IP 172.16.0.1/24). All interfaces are configured under OSPF area 0. The administrator has NOT manually configured an OSPF router ID. Which IP address will the router select as its OSPF Router ID?IP Connectivity
- 230.A network engineer needs to configure a static IPv6 route to the network 2001:db8:200::/64. The next-hop router's link-local address is FE80::1 on the local router's GigabitEthernet0/0 interface. Which command correctly configures this route?IP Connectivity
- 231.A network administrator configures a static route on a Cisco router using the command `ip route 192.168.10.0 255.255.255.0 GigabitEthernet0/1`. Which routing table component is implicitly used as the next-hop for this route?IP Connectivity
- 232.A network administrator is reviewing the routing table on an IPv6-enabled router and sees the following entry: `S 2001:DB8:100::/48 [1/0] via 2001:DB8:ABCD::1, GigabitEthernet0/0` What does the `S` code at the beginning of this entry signify?IP Connectivity
- 233.A company network uses OSPF as its primary routing protocol. An administrator wants to configure a backup path to the 192.168.10.0/24 network that should only be used if the OSPF-learned path becomes unavailable. The OSPF route has an administrative distance of 110. Which command correctly configures this backup path?IP Connectivity
- 234.A network administrator is troubleshooting an OSPF network. R1 and R2 are directly connected via a serial link. The `show ip ospf neighbor` command on R1 shows R2 in the `EXSTART/EXCHANGE` state. What is the most likely reason for this state, assuming all other OSPF parameters (timers, area ID, authentication) match?IP Connectivity
- 235.Two routers, R1 and R2, are running HSRP for VLAN 10. R1 has a priority of 120, and R2 has a priority of 110. Both routers have HSRP preemption enabled. R1 is currently the Active router. What will happen if R1's GigabitEthernet0/1 interface, which serves as the HSRP interface, goes down and then comes back up?IP Connectivity
- 236.A network technician is configuring a Cisco router to forward traffic for network 192.168.50.0/24. They issue the command `ip route 192.168.50.0 255.255.255.0 10.0.0.2`. What type of static route is this?IP Connectivity
- 237.A network engineer is configuring OSPFv2 on a router. The router has a GigabitEthernet0/0 interface with IP address 192.168.1.1/28. Which 'network' command and wildcard mask combination will correctly enable OSPF on this interface?IP Connectivity
- 238.A network segment has two routers, R1 and R2, configured for HSRP. R1 has a priority of 150, and R2 has a priority of 100. Both are configured with `standby 1 ip 192.168.1.254`. The `standby 1 preempt` command is configured on R1, but NOT on R2. If R1 fails and then recovers, what will be the state of R1 and R2?IP Connectivity
- 239.A network technician configures a static route on a Cisco router to reach the 192.168.10.0/24 network via the next-hop IP address 10.0.0.2. The router already has a directly connected route to 10.0.0.0/24 through its GigabitEthernet0/1 interface. Which type of static route has been configured?IP Connectivity
- 240.Refer to the following router configuration: ``` router ospf 1 network 10.1.1.0 0.0.0.255 area 0 network 10.1.2.0 0.0.0.255 area 1 passive-interface GigabitEthernet0/0 ``` Which statement is true regarding the effect of the `passive-interface GigabitEthernet0/0` command?IP Connectivity
- 241.A network administrator needs to verify the administrative distance of a route and its next-hop information. Which `show` command would provide this information for all routes in the routing table?IP Connectivity
- 242.A router's routing table contains the following entries for the destination network 192.168.1.0: `O 192.168.1.0/24 [110/10] via 10.0.0.1` `S 192.168.1.0/26 [1/0] via 10.0.0.2` Which route will the router choose to forward a packet destined for 192.168.1.10?IP Connectivity
- 243.A network administrator issues the 'show ip route' command on a router and observes the following entry: O E2 10.10.10.0/24 [110/20] via 192.168.1.1, 00:01:30, GigabitEthernet0/0 What does the value '20' represent in this routing table entry?IP Connectivity
- 244.A network engineer is troubleshooting an OSPF network. R1 and R2 are directly connected via a GigabitEthernet0/1 interface. The engineer configures `ip ospf hello-interval 5` on R1's GigabitEthernet0/1 interface. What command should the engineer configure on R2's directly connected interface to ensure OSPF adjacency forms successfully?IP Connectivity
- 245.Refer to the following router output: ``` R1# show ip route Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2 i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2 ia - IS-IS inter area, * - candidate default, U - per-user static route o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP a - application route + - replicated route, % - next hop override, p - overrides from PfR Gateway of last resort is 10.0.0.1 to network 0.0.0.0 S* 0.0.0.0/0 [1/0] via 10.0.0.1 10.0.0.0/8 is variably subnetted, 2 subnets, 2 masks C 10.0.0.0/24 is directly connected, GigabitEthernet0/0 L 10.0.0.2/32 is directly connected, GigabitEthernet0/0 ``` Based on the output, what is the administrative distance of the default route configured on R1?IP Connectivity
- 246.A network administrator is troubleshooting an issue where a wireless client is unable to obtain an IP address from a DHCP server. The client is connected to an Access Point (AP) operating in Local mode, which is registered to a Wireless LAN Controller (WLC). The DHCP server is located on a different VLAN than the wireless client VLAN. Which of the following is the most likely cause of the problem?Network Access
- 247.A network administrator is configuring a Cisco Catalyst switch to support multiple VLANs over a single link to another switch. The administrator intends to use 802.1Q tagging for VLAN identification. Which of the following commands correctly configures a port as an 802.1Q trunk?Network Access
- 248.A network administrator is reviewing the Rapid PVST+ configuration on a Cisco Catalyst switch. The output of 'show spanning-tree vlan 10' shows a port Gi0/1 with the role 'Alt', state 'BLK', and type 'P2p'. Which of the following statements accurately describes the 'Alt' role and 'P2p' type for this port?Network Access
- 249.A network automation engineer is developing an Ansible playbook to configure VLANs on a group of Cisco IOS XE switches. The engineer wants to ensure that if a VLAN already exists with the desired configuration, Ansible does not attempt to re-apply the configuration, and if it doesn't exist, it creates it. Which Ansible module and state combination should be used to achieve this behavior?Automation and Programmability
- 250.A network technician is configuring an EtherChannel using LACP between two Cisco Catalyst 2960 switches. On SW1, the interfaces Gi0/1 and Gi0/2 are configured with 'channel-group 1 mode active'. On SW2, the interfaces Gi0/1 and Gi0/2 are configured with 'channel-group 1 mode passive'. What is the operational status of the EtherChannel?Network Access