11/22/22, 1:13 AM 200-301 Exam - Free Questions and Answers - ITExams.

com

Cisco Certified Network Associate (CCNA) v1.0 (200-301) - Full Access

Question 201 ( Network Access )

Refer to the exhibit. Which two commands when used together create port channel 10? (Choose two.)

A. int range g0/0-1 channel-group 10 mode active

B. int range g0/0-1 channel-group 10 mode desirable
C. int range g0/0-1 channel-group 10 mode passive
D. int range g0/0-1 channel-group 10 mode auto
E. int range g0/0-1 channel-group 10 mode on

Answer : AC

Question 202 ( Network Access ) 

Refer to the exhibit. An administrator is tasked with configuring a voice VLAN. What is the expected outcome when a Cisco phone is connected to the
GigabitEthernet 3/1/4 port on a switch?

A. The phone and a workstation that is connected to the phone do not have VLAN connectivity.
B. The phone sends and receives data in VLAN 50, but a workstation connected to the phone sends and receives data in VLAN 1.
C. The phone sends and receives data in VLAN 50, but a workstation connected to the phone has no VLAN connectivity.
D. The phone and a workstation that is connected to the phone send and receive data in VLAN 50.

Answer : B

Question 203 ( Network Access ) 

Refer to the exhibit. Which action is expected from SW1 when the untagged frame is received on the GigabitEthernet0/1 interface?

A. The frame is processed in VLAN 1

B. The frame is processed in VLAN 11
C. The frame is processed in VLAN 5
D. The frame is dropped

Answer : C

https://www.itexams.com/exam/200-301? 1/32
11/22/22, 1:13 AM 200-301 Exam - Free Questions and Answers - ITExams.com

Question 204 ( Network Access )


Which command is used to enable LLDP globally on a Cisco IOS ISR?

A. lldp run
B. lldp enable
C. lldp transmit
D. cdp run
E. cdp enable

Answer : A

Explanation:
Link Layer Discovery Protocol (LLDP) is an industry standard protocol that allows devices to advertise, and discover connected devices, and there capabilities
(same as CDP of Cisco). To enable it on Cisco devices, we have to use this command under global configuration mode:

Sw(config)# lldp run -

Question 205 ( Network Access )


Which command should you enter to configure an LLDP delay time of 5 seconds?

A. lldp timer 5000

B. lldp holdtime 5
C. lldp reinit 5000
D. lldp reinit 5

Answer : D

Explanation:
✑ lldp holdtime seconds: Specify the amount of time a receiving device should hold the information from your device before discarding it
✑ lldp reinit delay: Specify the delay time in seconds for LLDP to initialize on an interface
✑ lldp timer rate: Set the sending frequency of LLDP updates in seconds
Reference:
https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3560/software/release/12-2_55_se/configuration/guide/3560_scg/swlldp.html

Question 206 ( Network Access )


In a CDP environment, what happens when the CDP interface on an adjacent device is configured without an IP address?

A. CDP becomes inoperable on that neighbor

B. CDP uses the IP address of another interface for that neighbor
C. CDP operates normally, but it cannot provide IP address information for that neighbor
D. CDP operates normally, but it cannot provide any information for that neighbor

Answer : C

Explanation:
Although CDP is a Layer 2 protocol but we can check the neighbor IP address with the ‫ג‬€show cdp neighbor detail‫ג‬€ command. If the neighbor does not has an IP address then CDP still operates without any problem.
But the IP address of that neighbor is not provided.

Question 207 ( Network Access )


DRAG DROP -
Drag and drop the benefits of a Cisco Wireless Lan Controller from the left onto the correct examples on the right.
Select and Place:

Answer :

https://www.itexams.com/exam/200-301? 2/32
11/22/22, 1:13 AM 200-301 Exam - Free Questions and Answers - ITExams.com

Question 208 ( Network Access )


When configuring an EtherChannel bundle, which mode enables LACP only if a LACP device is detected?

A. Passive
B. Desirable
C. On
D. Auto
E. Active

Answer : A

Explanation:
The LACP is Link Aggregation Control Protocol. LACP is an open protocol, published under the 802.3ad.
The modes of LACP are active, passive or on. The side configured as ‫ג‬€passive‫ג‬€ will waiting the other side that should an Active for the Etherchannel to be established.
PAgP is Port-Aggregation Protocol. It is Cisco proprietary protocol. The mode are On, Desirable or Auto. Desirable ‫ג‬€" Auto will establish an EtherChannel.
An example of how to configure an Etherchannel:

SwitchFormula1>enable -
SwitchFormula1#configure terminal
SwitchFormula1(config)# interface range f0/5 -14
SwitchFormula1(config-if-range)# channel-group 13 mode ?
active Enable LACP unconditionally
auto Enable PAgP only if a PAgP device is detected
desirable Enable PAgP unconditionally
on Enable Etherchannel only
passive Enable LACP only if a LACP device is detected

Question 209 ( Network Access )


Refer to the exhibit. Which VLAN ID is associated with the default VLAN in the given environment?

A. VLAN 1
B. VLAN 5
C. VLAN 10
D. VLAN 20

Answer : A

Question 210 ( Network Access ) 

Which two VLAN IDs indicate a default VLAN? (Choose two.)

A 0
https://www.itexams.com/exam/200-301? 3/32
11/22/22, 1:13 AM 200-301 Exam - Free Questions and Answers - ITExams.com
A. 0
B. 1
C. 1005
D. 1006
E. 4096

Answer : BC

Explanation:
VLAN 1 is a system default VLAN, you can use this VLAN but you cannot delete it. By default VLAN 1 is use for every port on the switch.
Standard VLAN range from 1002-1005 it‫ג‬€™s Cisco default for FDDI and Token Ring. You cannot delete VLANs 1002-1005. Mostly we don‫ג‬€™t use VLAN in this range.

Question 211 ( Network Access )


Which two pieces of information about a Cisco device can Cisco Discovery Protocol communicate? (Choose two.)

A. the native VLAN

B. the trunking protocol
C. the VTP domain
D. the spanning-tree priority
E. the spanning-tree protocol

Answer : AC

Question 212 ( Network Access )


After you deploy a new WLAN controller on your network, which two additional tasks should you consider? (Choose two.)

A. deploy load balancers

B. configure additional vlans
C. configure multiple VRRP groups
D. deploy POE switches
E. configure additional security policies

Answer : AE

Question 213 ( Network Access ) 

Refer to the exhibit. How will switch SW2 handle traffic from VLAN 10 on SW1?

A. It sends the traffic to VLAN 10.

B. It sends the traffic to VLAN 100.
C. It drops the traffic.
D. It sends the traffic to VLAN 1.

Answer : B

Explanation:
Since SW-1 is configured native VLAN is VLAN10, so traffic coming out of VLAN-10 is untagged, & goes directly to SW-2 Native VLAN: VLAN100, due to VLAN mismatch.

https://www.itexams.com/exam/200-301? 4/32
11/22/22, 1:13 AM 200-301 Exam - Free Questions and Answers - ITExams.com

Question 214 ( Network Access )


Which two commands can you use to configure an actively negotiate EtherChannel? (Choose two.)

A. channel-group 10 mode on
B. channel-group 10 mode auto
C. channel-group 10 mode passive
D. channel-group 10 mode desirable
E. channel-group 10 mode active

Answer : DE

Question 215 ( Network Access )


How does STP prevent forwarding loops at OSI Layer 2?

A. TTL
B. MAC address forwarding
C. Collision avoidance
D. Port blocking

Answer : D

Question 216 ( Network Access )


Which two statements about VTP are true? (Choose two.)

A. All switches must be configured with the same VTP domain name
B. All switches must be configured to perform trunk negotiation
C. All switches must be configured with a unique VTP domain name
D. The VTP server must have the highest revision number in the domain
E. All switches must use the same VTP version

Answer : AE

Question 217 ( Network Access )


Which type does a port become when it receives the best BPDU on a bridge?

A. The designated port

B. The backup port
C. The alternate port
D. The root port

Answer : D

Question 218 ( Network Access ) 

Which value can you modify to configure a specific interface as the preferred forwarding interface?

A. The interface number

B. The port priority
C. The VLAN priority
D. The hello time

Answer : B

Question 219 ( Network Access ) 

Which statement about Cisco Discovery Protocol is true?

A. It is a Cisco-proprietary protocol.
B. It runs on the network layer.
C. It can discover information from routers, firewalls, and switches.
D. It runs on the physical layer and the data link layer.

Answer : A
https://www.itexams.com/exam/200-301? 5/32
11/22/22, 1:13 AM 200-301 Exam - Free Questions and Answers - ITExams.com
Answer : A

Question 220 ( Network Access )


What are two reasons a network administrator would use CDP? (Choose two.)

A. to verify the type of cable interconnecting two devices

B. to determine the status of network services on a remote device
C. to obtain VLAN information from directly connected switches
D. to verify Layer 2 connectivity between two devices when Layer 3 fails
E. to obtain the IP address of a connected device in order to telnet to the device
F. to determine the status of the routing protocols between directly connected routers

Answer : DE

Question 221 ( Network Access )


What are two benefits of using VTP in a switching environment? (Choose two.)

A. It allows switches to read frame tags.

B. It allows ports to be assigned to VLANs automatically.
C. It maintains VLAN consistency across a switched network.
D. It allows frames from multiple VLANs to use a single interface.
E. It allows VLAN information to be automatically propagated throughout the switching environment.

Answer : CE

Question 222 ( Network Access )


Which three statements are typical characteristics of VLAN arrangements? (Choose three.)

A. A new switch has no VLANs configured.

B. Connectivity between VLANs requires a Layer 3 device.
C. VLANs typically decrease the number of collision domains.
D. Each VLAN uses a separate address space.
E. A switch maintains a separate bridging table for each VLAN.
F. VLANs cannot span multiple switches.

Answer : BDE

Question 223 ( Network Access )


On a corporate network, hosts on the same VLAN can communicate with each other, but they are unable to communicate with hosts on different VLANs. What is needed to allow communication between the VLANs?

A. a router with subinterfaces configured on the physical interface that is connected to the switch
B. a router with an IP address on the physical interface connected to the switch
C. a switch with an access link that is configured between the switches
D. a switch with a trunk link that is configured between the switches

Answer : A

Explanation:
Different VLANs can't communicate with each other, they can communicate with the help of Layer3 router. Hence, it is needed to connect a router to a switch, then make the sub-interface on the router to connect to
the switch, establishing Trunking links to achieve communications of devices which belong to different VLANs.

Question 224 ( Network Access )


Which statement about LLDP is true?

A. It is a Cisco proprietary protocol.

B. It is configured in global configuration mode.
C. The LLDP update frequency is a fixed value.
D. It runs over the transport layer.

Answer : B

Question 225 ( Network Access )


What is a function of Wireless LAN Controller?

A register with a single access point that controls traffic between wired and wireless endpoints
https://www.itexams.com/exam/200-301? 6/32
11/22/22, 1:13 AM 200-301 Exam - Free Questions and Answers - ITExams.com
A. register with a single access point that controls traffic between wired and wireless endpoints
B. use SSIDs to distinguish between wireless clients
C. send LWAPP packets to access points
D. monitor activity on wireless and wired LANs

Answer : C

Explanation:
Lightweight APs (LAPs) is devices require no initial configuration. LAPs use the Lightweight Access Point Protocol (LWAPP) to communicate with a WLAN controller (WLC), as shown in the below figure. Controller-
based APs are useful in situations where many APs are required in the network. As more APs are added, each AP is automatically configured and managed by the WLC.

Question 226 ( Network Access )


Which technology is used to improve web traffic performance by proxy caching?

A. WSA
B. Firepower
C. ASA
D. FireSIGHT

Answer : A

Question 227 ( Network Access )


What criteria is used first during the root port selection process?

A. local port ID
B. lowest path cost to the toot bridge
C. lowest neighbor's bridge ID
D. lowest neighbor's port ID

Answer : B

Question 228 ( Network Access )


Which statement about VLAN configuration is true?

A. The switch must be in VTP server or transparent mode before you can configure a VLAN
B. The switch must be in config-vlan mode before you configure an extended VLAN
C. Dynamic inter-VLAN routing is supported on VLAN2 through VLAN 4064
D. A switch in VTP transparent mode save the VLAN databases to the running configuration only

Answer : A

Question 229 ( Network Access )


Refer to the exhibit. What two conclusions should be made about this configuration? (Choose two.)

A. The root port is FastEthernet 2/1

B. The designated port is FastEthernet 2/1
C. The spanning-tree mode is PVST+
D. This is a root bridge
E. The spanning-tree mode is Rapid PVST+

https://www.itexams.com/exam/200-301? 7/32
11/22/22, 1:13 AM 200-301 Exam - Free Questions and Answers - ITExams.com

Answer : AE

Question 230 ( Network Access )


A network engineer must create a diagram of a multivendor network. Which command must be configured on the Cisco devices so that the topology of the network is allowed to be mapped?

A. Device(config)#lldp run
B. Device(config)#cdp run
C. Device(config-if)#cdp enable
D. Device(config)#flow-sampler-map topology

Answer : A

Question 231 ( Network Access )


How do AAA operations compare regarding user identification, user services, and access control?

A. Authorization provides access control, and authentication tracks user services

B. Authentication identifies users, and accounting tracks user services
C. Accounting tracks user services, and authentication provides access control
D. Authorization identifies users, and authentication provides access control

Answer : B

Question 232 ( Network Access ) 

What is the difference between RADIUS and TACACS+?

A. RADIUS logs all commands that are entered by the administrator, but TACACS+ logs only start, stop, and interim commands.
B. TACACS+ separates authentication and authorization, and RADIUS merges them.
C. TACACS+ encrypts only password information, and RADIUS encrypts the entire payload.
D. RADIUS is most appropriate for dial authentication, but TACACS+ can be used for multiple types of authentication.

Answer : B

Question 233 ( Network Access )


What is a difference between local AP mode and FlexConnect AP mode?

A. Local AP mode creates two CAPWAP tunnels per AP to the WLC

B. Local AP mode causes the AP to behave as if it were an autonomous AP
C. FlexConnect AP mode fails to function if the AP loses connectivity with the WLC
D. FlexConnect AP mode bridges the traffic from the AP to the WLC when local switching is configured

Answer : A

Question 234 ( Network Access )


The SW1 interface g0/1 is in the down/down state. What are two reasons for the interface condition? (Choose two.)

A. There is a protocol mismatch

B. There is a duplex mismatch
C. The interface is shut down
D. The interface is error-disabled
E. There is a speed mismatch

Answer : DE

Explanation:
The interface is shut down - ADMIN DOWN / DOWN
The interface is error-disabled - DOWN / DOWN
There is a speed mismatch - DOWN / DOWN

Question 235 ( Network Access )


How will Link Aggregation be implemented on a Cisco Wireless LAN Controller?
https://www.itexams.com/exam/200-301? 8/32
11/22/22, 1:13 AM 200-301 Exam - Free Questions and Answers - ITExams.com

A. The EtherChannel must be configured in ‫ג‬€mode active‫ג‬€.

B. When enabled, the WLC bandwidth drops to 500 Mbps.

C. To pass client traffic, two or more ports must be configured.

D. One functional physical port is needed to pass client traffic.

Answer : D

Reference:
https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-2/config-guide/b_cg82/b_cg82_chapter_010101011.html

Question 236 ( Network Access )


Which two conditions must be met before SSH operates normally on a Cisco IOS switch? (Choose two.)

A. IP routing must be enabled on the switch.

B. A console password must be configured on the switch.
C. Telnet must be disabled on the switch.
D. The switch must be running a k9 (crypto) IOS image.
E. The ip domain-name command must be configured on the switch.

Answer : DE

Reference:
https://www.cisco.com/c/en/us/support/docs/security-vpn/secure-shell-ssh/4145-ssh.html

Question 237 ( Network Access ) 

Refer to the exhibit. Which password must an engineer use to enter the enable mode?

A. adminadmin123
B. cisco123
C. default
D. testing1234

Answer : D

Explanation:
If neither the enable password command nor the enable secret command is configured, and if there is a line password configured for the console, the console line password serves as the enable password for all VTY
sessions -> The ‫ג‬€enable secret‫ג‬€ will be used first if available, then ‫ג‬€enable password‫ג‬€ and line password.

Question 238 ( Network Access )


Which state does the switch port move to when PortFast is enabled?

A. blocking
B. listening
C. learning
D. forwarding

Answer : D

https://www.itexams.com/exam/200-301? 9/32
11/22/22, 1:13 AM 200-301 Exam - Free Questions and Answers - ITExams.com

Question 239 ( Network Access )


Which protocol prompts the Wireless LAN Controller to generate its own local web administration SSL certificate for GUI access?

A. RADIUS
B. HTTPS
C. TACACS+
D. HTTP

Answer : B

Explanation:
You can protect communication with the GUI by enabling HTTPS. HTTPS protects HTTP browser sessions by using the Secure Sockets Layer (SSL) protocol.
When you enable HTTPS, the controller generates its own local web administration SSL certificate and automatically applies it to the GUI. You also have the option of downloading an externally generated certificate.
Reference:
https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-0/configuration-guide/b_cg80/b_cg80_chapter_011.html

Question 240 ( Network Access )


An engineer must configure interswitch VLAN communication between a Cisco switch and a third-party switch. Which action should be taken?

A. configure DSCP
B. configure IEEE 802.1q
C. configure ISL
D. configure IEEE 802.1p

Answer : B

Explanation:
VLAN trunking offers two options, ISL and 802.1Q. ISL is Cisco proprietary while 802.1Q is standards based and supported by multiple vendors.

Question 241 ( Network Access ) 

An engineer requires a switch interface to actively attempt to establish a trunk link with a neighbor switch. What command must be configured?

A. switchport mode trunk

B. switchport mode dynamic desirable
C. switchport nonegotiate
D. switchport mode dynamic auto

Answer : B

Reference:
https://www.ciscopress.com/articles/article.asp?p=2181837&seqNum=8#:~:text=switchport%20mode%20dynamic%20auto%3A%20Makes,to%20trunk%20or%
.
20desirable%20mode.&text=switchport%20mode%20dynamic%20desirable%3A%20Makes,link%20to%20a%20trunk%20link

Question 242 ( Network Access ) 

Refer to the exhibit. After the election process, what is the root bridge in the HQ LAN?

Switch 1: 0C:E0:38:81:32:58 -

Switch 2: 0C:0E:15:22:1A:61 -

Switch 3: 0C:0E:15:1D:3C:9A -

Switch 4: 0C:E0:19:A1:4D:16 -

https://www.itexams.com/exam/200-301? 10/32
11/22/22, 1:13 AM 200-301 Exam - Free Questions and Answers - ITExams.com

A. Switch 1
B. Switch 2
C. Switch 3
D. Switch 4

Answer : C

Question 243 ( Network Access )


An engineer must establish a trunk link between two switches. The neighboring switch is set to trunk or desirable mode. What action should be taken?

A. configure switchport nonegotiate

B. configure switchport mode dynamic desirable
C. configure switchport mode dynamic auto
D. configure switchport trunk dynamic desirable

Answer : C

Question 244 ( Network Access ) 

Which spanning-tree enhancement avoids the learning and listening states and immediately places ports in the forwarding state?

A. BPDUfilter
B. PortFast
C. Backbonefast
D. BPDUguard

Answer : B

Question 245 ( Network Access )


How does the dynamically-learned MAC address feature function?

A. The CAM table is empty until ingress traffic arrives at each port
B. Switches dynamically learn MAC addresses of each connecting CAM table.
C. The ports are restricted and learn up to a maximum of 10 dynamically-learned addresses
D. It requires a minimum number of secure MAC addresses to be filled dynamically

Answer : A
https://www.itexams.com/exam/200-301? 11/32
11/22/22, 1:13 AM 200-301 Exam - Free Questions and Answers - ITExams.com

Question 246 ( Network Access )


When using Rapid PVST+, which command guarantees the switch is always the root bridge for VLAN 200?

A. spanning-tree vlan 200 priority 614440

B. spanning-tree vlan 200 priority 0
C. spanning-tree vlan 200 root primary
D. spanning-tree vlan 200 priority 38813258

Answer : B

Question 247 ( Network Access )



Refer to the exhibit. Which command must be executed for Gi1/1 on SW1 to passively become a trunk port if Gi1/1 on SW2 is configured in desirable or trunk
mode?

A. switchport mode dynamic auto

B. switchport mode dot1-tunnel
C. switchport mode dynamic desirable
D. switchport mode trunk

Answer : A

Question 248 ( Network Access ) 

Refer to the exhibit. The entire contents or the MAC address table are shown. Sales-4 sends a data frame to Sales-1.

What does the switch do as it receives the frame from Sales-4?

A Map the Layer 2 MAC address to the Layer 3 IP address and forward the frame
https://www.itexams.com/exam/200-301? 12/32
11/22/22, 1:13 AM 200-301 Exam - Free Questions and Answers - ITExams.com
A. Map the Layer 2 MAC address to the Layer 3 IP address and forward the frame.
B. Insert the source MAC address and port into the forwarding table and forward the frame to Sales-1.
C. Perform a lookup in the MAC address table and discard the frame due to a missing entry.
D. Flood the frame out of all ports except on the port where Sales-1 is connected.

Answer : B

Question 249 ( Network Access )



Refer to the exhibit. An engineer must configure GigabitEthernet1/1 to accommodate voice and data traffic. Which configuration accomplishes this task?

A. interface gigabitethernet1/1 switchport mode access switchport access vlan 300 switchport voice vlan 400
B. interface gigabitethernet1/1 switchport mode trunk switchport trunk vlan 300 switchport trunk vlan 400
C. interface gigabitethernet1/1 switchport mode access switchport voice vlan 300 switchport access vlan 400
D. interface gigabitethernet1/1 switchport mode trunk switchport trunk vlan 300 switchport voice vlan 400

Answer : A

Question 250 ( Network Access )


An engineer needs to add an old switch back into a network. To prevent the switch from corrupting the VLAN database, with action must be taken?

A. Add the switch in the VTP domain with a lower revision number.
B. Add the switch in the VTP domain with a higher revision number.
C. Add the switch with DTP set to dynamic desirable.
D. Add the switch with DTP set to desirable.

Answer : A

Question 251 ( Network Access ) 

Which technology prevents client devices from arbitrarily connecting to the network without state remediation?

A. 802.11n
B. 802.1x
C. MAC Authentication Bypass
D. IP Source Guard

Answer : B

Question 252 ( Network Access ) 

Which protocol does an access point use to draw power from a connected switch?

A. Internet Group Management Protocol

B. Cisco Discovery Protocol
C. Adaptive Wireless Path Protocol
D. Neighbor Discovery Protocol

Answer : B

Q ti 253 ( N t kA
https://www.itexams.com/exam/200-301?
)
 13/32
11/22/22, 1:13 AM 200-301 Exam - Free Questions and Answers - ITExams.com
Question 253 ( Network Access )

An administrator must secure the WLC from receiving spoofed association requests. Which steps must be taken to configure the WLC to restrict the requests and force the user to wait 10 ms to retry an association
request?
A. Enable MAC filtering and set the SA Query timeout to 10.
B. Enable 802.1x Layer 2 security and set the Comeback timer to 10.
C. Enable Security Association Teardown Protection and set the SA Query timeout to 10.
D. Enable the Protected Management Frame service and set the Comeback timer to 10.

Answer : C

Question 254 ( Network Access )



Refer to the exhibit. Only four switches are participating in the VLAN spanning-tree process.

Branch-1: priority 614440 -

Branch-2: priority 39391170 -

Branch-3: priority 0 -

Branch-4: root primary -

Which switch becomes the permanent root bridge for VLAN 5?

A. Branch-1
B. Branch-2
C. Branch-3
D. Branch-4

Answer : C

Question 255 ( Network Access ) 

An engineer must configure traffic for a VLAN that is untagged by the switch as it crosses a trunk link. Which command should be used?

A. switchport trunk encapsulation dot1q

B. switchport trunk allowed vlan 10
C. switchport mode trunk
D. switchport trunk native vlan 10

Answer : D

Question 256 ( Network Access )


What are two benefits of using the PortFast feature? (Choose two.)

A. Enabled interfaces are automatically placed in listening state.

B. Enabled interfaces wait 50 seconds before they move to the forwarding state.
C. Enabled interfaces never generate topology change notifications.
D. Enabled interfaces come up and move to the forwarding state immediately.
E. Enabled interfaces that move to the learning state generate switch topology change notifications.

https://www.itexams.com/exam/200-301? 14/32
11/22/22, 1:13 AM 200-301 Exam - Free Questions and Answers - ITExams.com

Answer : AD

Question 257 ( Network Access )


What is the benefit of configuring PortFast on an interface?

A. The frames entering the interface are marked with the higher priority and then processed faster by a switch.
B. After the cable is connected, the interface is available faster to send and receive user data.
C. Real-time voice and video frames entering the interface are processed faster.
D. After the cable is connected, the interface uses the fastest speed setting available for that cable type.

Answer : B

Question 258 ( Network Access )


DRAG DROP -
Drag and drop the functions of AAA supporting protocols from the left onto the protocols on the right.
Select and Place:

Answer :

https://www.itexams.com/exam/200-301? 15/32
11/22/22, 1:13 AM 200-301 Exam - Free Questions and Answers - ITExams.com

Question 259 ( Network Access )


Why does a switch flood a frame to all ports?

A. The frame has zero destination MAC addresses.

B. The destination MAC address of the frame is unknown.
C. The source MAC address of the frame is unknown
D. The source and destination MAC addresses of the frame are the same.

Answer : B

Question 260 ( Network Access )


An engineer configures interface Gi1/0 on the company PE router to connect to an ISP. Neighbor discovery is disabled.

Which action is necessary to complete the configuration if the ISP uses third-party network devices?

A. Disable autonegotiation.
B. Enable LLDP globally.
C. Enable LLDP-MED on the ISP device.
D. Disable Cisco Discovery Protocol on the interface.

Answer : B

Question 261 ( Network Access )


DRAG DROP -
Drag and drop the Rapid PVST+ forwarding state actions from the left to the right. Not all actions are used.
Select and Place:

https://www.itexams.com/exam/200-301? 16/32
11/22/22, 1:13 AM 200-301 Exam - Free Questions and Answers - ITExams.com

Answer :

Question 262 ( Network Access )


Which access point mode relies on a centralized controller for management, roaming, and SSID configuration?

A. lightweight mode
B. autonomous mode
C. bridge mode
D. repeater mode

Answer : A

Question 263 ( Network Access ) 

Refer to the exhibit. A network engineer must configure communication between PC A and the File Server. To prevent interruption for any other
communications, which command must be configured?

A. switchport truck allowed vlan 12

B. switchport truck allowed vlan none
C. switchport truck allowed vlan add 13
D. switchport truck allowed vlan remove 10-11

https://www.itexams.com/exam/200-301? 17/32
11/22/22, 1:13 AM 200-301 Exam - Free Questions and Answers - ITExams.com

Answer : C

Question 264 ( Network Access )



Refer to the exhibit. What is the result if Gig1/11 receives an STP BPDU?

A. The port transitions to STP blocking.

B. The port immediately transitions to STP forwarding.
C. The port goes into error-disable state.
D. The port transitions to the root port.

Answer : C

Question 265 ( Network Access ) 

Which access layer threat-mitigation technique provides security based on identity?

A. Dynamic ARP Inspection

B. DHCP snooping
C. 802.1x
D. using a non-default native VLAN

Answer : C

Question 266 ( Network Access )



Refer to the exhibit. Which action do the switches take on the trunk link?

A. The trunk does not form, and the ports go into an err-disabled status.
B. The trunk forms, but the mismatched native VLANs are merged into a single broadcast domain.
C. The trunk forms, but VLAN 99 and VLAN 999 are in a shutdown state.
D. The trunk does not form, but VLAN 99 and VLAN 999 are allowed to traverse the link.

Answer : B

Explanation:
The trunk still forms with mismatched native VLANs and the traffic can actually flow between mismatched switches. But it is absolutely necessary that the native
VLANs on both ends of a trunk link match; otherwise a native VLAN mismatch occurs, causing the two VLANs to effectively merge. For example, with the above configuration, SW1 would send untagged frames for
VLAN 999. SW2 receives them but would think they are for VLAN 99 so we can say these two VLANs are merged.
https://www.itexams.com/exam/200-301? 18/32
11/22/22, 1:13 AM 200-301 Exam - Free Questions and Answers - ITExams.com

Question 267 ( Network Access )


A network engineer must configure two new subnets using the address block 10.70.128.0/19 to meet these requirements:
✑ The first subnet must support 24 hosts.
✑ The second subnet must support 472 hosts.
✑ Both subnets must use the longest subnet mask possible from the address block.
Which two configurations must be used to configure the new subnets and meet a requirement to use the first available address in each subnet for the router interfaces? (Choose two.)

A. interface vlan 1148 ip address 10.70.148.1 255.255.254.0

B. interface vlan 3002 ip address 10.70.147.17 255.255.255.224
C. interface vlan 4722 ip address 10.70.133.17 255.255.255.192
D. interface vlan 1234 ip address 10.70.159.1 255.255.254.0
E. interface vlan 155 ip address 10.70.155.65 255.255.255.224

Answer : DE

Question 268 ( Network Access )



Refer to the exhibit. An administrator must configure interfaces Gi1/1 and Gi1/3 on switch SW11. PC-1 and PC-2 must be placed in the Data VLAN, and Phone-1
must be placed in the Voice VLAN. Which configuration meets these requirements?

A. interface gigabitethernet1/1 switchport mode access switchport access vlan 8 ! interface gigabitethernet1/3 switchport mode access switchport access vlan 8 switchport voice vlan 9
B. interface gigabitethernet1/1 switchport mode access switchport access vlan 8 ! interface gigabitethernet1/3 switchport mode trunk switchport trunk vlan 8 switchport voice vlan 9
C. interface gigabitethernet1/1 switchport mode access switchport access vlan 9 ! interface gigabitethernet1/3 switchport mode trunk switchport trunk vlan 8 switchport trunk vlan 9
D. interface gigabitethernet1/1 switchport mode access switchport access vlan 8 ! interface gigabitethernet1/3 switchport mode access switchport voice vlan 8 switchport access vlan 9

Answer : A

Question 269 ( Network Access )



https://www.itexams.com/exam/200-301? 19/32
11/22/22, 1:13 AM 200-301 Exam - Free Questions and Answers - ITExams.com

Refer to the exhibit. Users need to connect to the wireless network with IEEE 802.11r-compatible devices. The connection must be maintained as users travel
between floors or to other areas in the building. What must be the configuration of the connection?

A. Disable AES encryption.

B. Enable Fast Transition and select the FT 802.1x option.
C. Enable Fast Transition and select the FT PSK option.
D. Select the WPA Policy option with the CCKM option.

Answer : C

Reference:
https://www.cisco.com/c/dam/en/us/td/docs/wireless/controller/technotes/80211r-ft/b-80211r-dg.html

Question 270 ( Network Access ) 

Refer to the exhibit. An engineer is asked to insert the new VLAN into the existing trunk without modifying anything previously configured. Which command
accomplishes this task?

A. switchport trunk allowed vlan 100-104

B. switchport trunk allowed vlan 104
C. switchport trunk allowed vlan all
D. switchport trunk allowed vlan add 104

https://www.itexams.com/exam/200-301? 20/32
11/22/22, 1:13 AM 200-301 Exam - Free Questions and Answers - ITExams.com

Answer : D

Question 271 ( Network Access )


Aside from discarding, which two states does the switch port transition through while using RSTP (802.1w)? (Choose two.)

A. blocking
B. speaking
C. listening
D. learning
E. forwarding

Answer : DE

Reference:
https://www.cisco.com/c/en/us/support/docs/lan-switching/spanning-tree-protocol/24062-146.html

Question 272 ( Network Access ) 

DRAG DROP -
Drag and drop the facts about wireless architectures from the left onto the types of access point on the right. Not all options are used.
Select and Place:

Answer :

Question 273 ( Network Access )


Which interface mode must be configured to connect the lightweight APs in a centralized architecture?

https://www.itexams.com/exam/200-301? 21/32
11/22/22, 1:13 AM 200-301 Exam - Free Questions and Answers - ITExams.com

A. WLAN dynamic
B. trunk
C. access

D. management

Answer : C

Explanation:
While the Cisco WLCs always connect to 802.1Q trunks, Cisco lightweight APs do not understand VLAN tagging and should only be connected to the access ports of the neighbor switch.
This is an example switch port configuration from the Catalyst 3750: interface GigabitEthernet1/0/22 description Access Port Connection to Cisco Lightweight AP switchport access vlan 5 switchport mode access no
shutdown
Reference:
https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/69719-wlc-lwap-config.html

Question 274 ( Network Access )



Refer to the exhibit. The following must be considered:

✑ SW1 is fully configured for all traffic.
✑ The SW4 and SW9 links to SW1 have been configured.
✑ The SW4 interface Gi0/1 and Gi0/0 on SW9 have been configured.
✑ The remaining switches have had all VLANs added to their VLAN database.
Which configuration establishes a successful ping from PC2 to PC7 without interruption to traffic flow between other PCs?

A. SW4 interface Gi0/7 switchport mode trunk switchport trunk allowed vlan 108 ! interface Gi/0/2 switchport mode access switchport access vlan 14 SW11# interface Gi0/2 switchport mode trunk switchport trunk
allowed vlan 14,108 ! interface Gi0/1 switchport mode trunk switchport trunk allowed vlan 14,108 SW9# interface Gi0/2 switchport mode access switchport access vlan 14
B. SW4 interface Gi0/2 switchport mode trunk switchport trunk allowed vlan 14,108 SW11# interface Gi0/2 switchport mode trunk switchport trunk allowed vlan 14,108 !! interface Gi0/1 switchport mode trunk
switchport trunk allowed vlan 14,108 SW9# interface Gi0/2 switchport mode trunk switchport trunk allowed vlan 14
C. SW4 interface Gi0/2 switchport mode trunk switchport trunk allowed vlan 14 SW11# interface Gi0/1 switchport mode trunk switchport trunk allowed vlan 14 SW9# interface Gi0/2 switchport mode trunk
switchport trunk allowed vlan 108
D. SW4 interface Gi/0/2 switchport mode access switchport access vlan 14 SW11# interface Gi0/2 switchport mode trunk switchport trunk allowed vlan 14 ! interface Gi0/0 switchport mode access switchport access
vlan 14 ! interface Gi0/1 switchport mode trunk SW9# interface Gi0/2 switchport mode access switchport access vlan 14

Answer : C

Question 275 ( Network Access )



https://www.itexams.com/exam/200-301? 22/32
11/22/22, 1:13 AM 200-301 Exam - Free Questions and Answers - ITExams.com

Refer to the exhibit. The network administrator must prevent the switch Cat9K-2 IP address from being visible in LLDP without disabling the protocol. Which
action must be taken to complete the task?

A. Configure the no lldp mac-phy-cfg command globally on Cat9K-2.

B. Configure the no lldp receive command on interface G1/0/21 on Cat9K-1.
C. Configure the no lldp transmit command on interface G1/0/21 on Cat9K-1.
D. Configure the no lldp tlv-select management-address command globally on Cat9K-2.

Answer : C

Question 276 ( Network Access )



Refer to the exhibit. An engineer has started to configure replacement switch SW1. To verify part of the configuration, the engineer issued the commands as
shown and noticed that the entry for PC2 is missing. Which change must be applied to SW1 so that PC1 and PC2 communicate normally?

A. SW1(config)#interface fa0/2 SW1(config-if)#no switchport access vlan 2 SW1(config-if)#no switchport trunk allowed vlan 3 SW1(config-if)#switchport trunk allowed vlan 2
B. SW1(config)#interface fa0/2 SW1(config-if)#no switchport access vlan 2 SW1(config-if)#switchport trunk native vlan 2 SW1(config-if)#switchport trunk allowed vlan 3
C. SW1(config)#interface fa0/2 SW1(config-if)#no switchport mode trunk SW1(config-if)#no switchport trunk allowed vlan 3 SW1(config-if)#switchport mode access
D. SW1(config)#interface fa0/1 SW1(config-if)#no switchport access vlan 2 SW1(config-if)#switchport access vlan 3 SW1(config-if)#switchport trunk allowed vlan 2

Answer : C

Question 277 ( Network Access ) 

Refer to the exhibit. Which switch becomes the root of the spanning tree?

https://www.itexams.com/exam/200-301? 23/32
11/22/22, 1:13 AM 200-301 Exam - Free Questions and Answers - ITExams.com

Switch 1 -

BID: 32778 0018.184e.3c00 -

Switch 2 -

BID: 24586 001a.e3ff.a680 -

Switch 3 -

BID: 28682 0022.55cf.cc00 -

Switch 4 -

BID: 64000 4e15.8403.08f -

A. Switch 1
B. Switch 2
C. Switch 3
D. Switch 4

Answer : B

Question 278 ( Network Access )


DRAG DROP -
Drag and drop the facts about wireless architectures from the left onto the types of access point on the right. Not all options are used.
Select and Place:

https://www.itexams.com/exam/200-301? 24/32
11/22/22, 1:13 AM 200-301 Exam - Free Questions and Answers - ITExams.com

Answer :

Question 279 ( Network Access )



Refer to the exhibit. An engineer is configuring a Layer 3 port-channel interface with LACP. The configuration on the first device is complete, and it is verified
https://www.itexams.com/exam/200-301? 25/32
11/22/22, 1:13 AM 200-301 Exam - Free Questions and Answers - ITExams.com
that both interfaces have registered the neighbor device in the CDP table. Which task on the neighbor device enables the new port channel to come up without
negotiating the channel?

A. Configure the IP address of the neighboring device.

B. Bring up the neighboring interfaces using the no shutdown command.
C. Change the EtherChannel mode on the neighboring interfaces to auto.
D. Modify the static EtherChannel configuration of the device to passive mode.

Answer : D

Question 280 ( Network Access )



Refer to the exhibit. Which configuration establishes a Layer 2 LACP EtherChannel when applied to both switches?

A. Interface range G1/1 1/3 "€‫ ג‬switchport mode trunk channel-group 1 mode active no shutdown
B. Interface range G1/1 1/3 "€‫ ג‬switchport mode access channel-group 1 mode passive no shutdown
C. Interface range G1/1 1/3 "€‫ ג‬switchport mode trunk channel-group 1 mode desirable no shutdown
D. Interface range G1/1 1/3 "€‫ ג‬switchport mode access channel-group 1 mode on no shutdown

Answer : A

Question 281 ( Network Access )


Which switching concept is used to create separate broadcast domains?

A. STP
B. VTP
C. VLAN
D. CSMA/CD

Answer : C

Question 282 ( Network Access )



Refer to the exhibit. Which action must be taken so that neighboring devices rapidly discover switch Cat9300?

A. Enable portfast on the ports that connect to neighboring devices.

B. Configure the cdp timer 10 command on switch Cat9300.
C. Configure the cdp holdtime 10 command on switch Cat9300
D. Configure the cdp timer 10 command on the neighbors of switch Cat9300

Answer : B

Question 283 ( Network Access )


What is a requirement when configuring or removing LAG on a WLC?

A. The incoming and outgoing ports for traffic flow must be specified if LAG is enabled.
B. The management interface must be reassigned if LAG is disabled
C. The controller must be rebooted after enabling or reconfiguring LAG
D. Multiple untagged interfaces on the same port must be supported

Answer : B

https://www.itexams.com/exam/200-301? 26/32
11/22/22, 1:13 AM 200-301 Exam - Free Questions and Answers - ITExams.com

Question 284 ( Network Access )


DRAG DROP -
Drag and drop the threat-mitigation techniques from the left onto the types of threat or attack they mitigate on the right.
Select and Place:

Answer :

Question 285 ( Network Access ) 

Which type of port is used to connect the wired network when an autonomous AP maps two VLANs to its WLANs?

A. access
B. LAG
C. trunk
D. EtherChannel

Answer : C

Question 286 ( Network Access ) 

A network administrator needs to aggregate 4 ports into a single logical link which must negotiate layer 2 connectivity to ports on another switch. What must be configured when using active mode on both sides of the
connection?

A. LLDP
B. LACP
C. Cisco vPC
D. 802 1q trunks

Answer : B

Question 287 ( Network Access )



https://www.itexams.com/exam/200-301? 27/32
11/22/22, 1:13 AM 200-301 Exam - Free Questions and Answers - ITExams.com

Refer to the exhibit. An engineer built a new L2 LACP EtherChannel between SW1 and SW2 and executed these show commands to verify the work establish an
LACP port channel?

A. Change the channel-group mode on SW1 to desirable

B. Change the channel-group mode on SW1 to active or passive
C. Change the channel-group mode on SW2 to auto
D. Configure the interface port-channel 1 command on both swtiches

Answer : B

Question 288 ( Network Access )



Refer to the exhibit. For security reasons, automatic neighbor discovery must be disabled on the R5 Gi0/1 interface. These tasks must be completed:
✑ Disable all neighbor discovery methods on R5 interface Gi0/1
✑ Permit neighbor discovery on R5 interface Gi0/2.
✑ Verify there are no dynamically learned neighbors on R5 interface Gi0/1.
✑ Display the IP address of R6‫ג‬€™s interface Gi0/2
Which configuration must be used?

A. R5(config)#int Gi0/1 R5(config-if)#no cdp enable R5(config-if)#exit R5(config)#lldp run R5(config)#no cdp run R5#sh cdp neighbor detail R5#sh lldp neighbor
B. R5(config)#int Gi0/1 R5(config-if)#no cdp enable R5(config-if)#exit R5(config)#no lldp run R5(config)#cdp run R5#sh cdp neighbor R5#sh lldp neighbor
C. R5(config)#int Gi0/1 R5(config-if)#no cdp run R5(config-if)#exit R5(config)#lldp run R5(config)#cdp enable R5#sh cdp neighbor R5#sh lldp neighbor
D. R5(config)#int Gi0/1 R5(config-if)#no cdp enable R5(config-if)#exit R5(config)#no lldp run R5(config)#cdp run R5#sh cdp neighbor detail R5#sh lldp neighbor

Answer : D

Question 289 ( Network Access )


https://www.itexams.com/exam/200-301? 28/32
11/22/22, 1:13 AM 200-301 Exam - Free Questions and Answers - ITExams.com

Which two spanning-tree states are bypassed on an interface running PortFast? (Choose two.)

A. disabled

B. listening
C. learning
D. blocking
E. forwarding

Answer : BC

Question 290 ( Network Access )


DRAG DROP -
Drag and drop the management connection types from the left onto the definitions on the right.
Select and Place:

Answer :

Question 291 ( Network Access )


An engineer is configuring data and voice services to pass through the same port. The designated switch interface fastethernet0/1 must transmit packets using the same priority for data when they are received from
the access port of the IP phone. Which configuration must be used?

A. interface fastethernet0/1 switchport voice vlan dot1p

B. interface fastethernet0/1 switchport priority extend cos 7
C. interface fastethernet0/1 switchport voice vlan untagged
D. interface fastethernet0/1 switchport priority extend trust

Answer : D

Question 292 ( Network Access ) 

https://www.itexams.com/exam/200-301? 29/32
11/22/22, 1:13 AM 200-301 Exam - Free Questions and Answers - ITExams.com

Refer to the exhibit. Which change to the configuration on Switch2 allows the two switches to establish an EtherChannel?

A. Change the LACP mode to desirable

B. Change the protocol to PAgP and use auto mode
C. Change the LACP mode to active
D. Change the protocol to EtherChannel mode on

Answer : C

Question 293 ( Network Access )



Refer to the exhibit. An engineer must configure the interface that connects to PC1 and secure it in a way that only PC1 is allowed to use the port. No VLAN
tagging can be used except for a voice VLAN. Which command sequence must be entered to configure the switch?

A. SW1(config-if)#switchport mode dynamic auto SW1(config-if)#switchport port-security SW1(config-if)#switchport port-security violation restrict
B. SW1(config-if)#switchport mode nonegotiate SW1(config-if)#switchport port-security SW1(config-if)#switchport port-security maximum 1
C. SW1(config-if)#switchport mode access SW1(config-if)#switchport port-security SW1(config-if)#switchport port-security mac-address 0050.7966.6800
D. SW1(config-if)#switchport mode dynamic desirable SW1(config-if)#switchport port-security mac-address 0050.7966.6800 SW1(config-if)#switchport port-security mac-address sticky

Answer : C

Question 294 ( Network Access )


Which protocol must be implemented to support separate authorization and authentication solutions for wireless APs?

A RADIUS
https://www.itexams.com/exam/200-301? 30/32
11/22/22, 1:13 AM 200-301 Exam - Free Questions and Answers - ITExams.com
A. RADIUS
B. TACACS+
C. 802.1X
D. Kerberos

Answer : A

Question 295 ( Network Access )


Which port type supports the spanning-tree portfast command without additional configuration?

A. trunk ports
B. Layer 3 sub interfaces
C. Layer 3 main interfaces
D. access ports

Answer : D

Question 296 ( Network Access ) 

Refer to the exhibit. What are two conclusions about this configuration? (Choose two.)

A. The spanning-tree mode is Rapid PVST+

B. This tea root bridge
C. The spanning-tree mode is PVST+
D. The designated port is FastEthernet 2/1
E. The root port is FastEthernet 2/1

Answer : AE

Question 297 ( Network Access ) 

A Cisco engineer must configure a single switch interface to meet these requirements:
✑ Accept untagged frames and place them in VLAN 20
Accept tagged frames in VLAN 30 when CDP detects a Cisco IP phone

Which command set must the engineer apply?

A. switchport mode dynamic desirable switchport access vlan 20 switchport trunk allowed vlan 30 switchport voice vlan 30
B. switchport mode access switchport access vlan 20 switchport voice vlan 30
C. switchport mode dynamic auto switchport trunk native vlan 20 switchport trunk allowed vlan 30 switchport voice vlan 30
D. switchport mode trunk switchport access vlan 20 switchport voice vlan 30

Answer : D

Question 298 ( Network Access )


What does a switch use to build its MAC address table?

A. VTP
B. DTP
C. ingress traffic
D egress traffic
https://www.itexams.com/exam/200-301? 31/32
11/22/22, 1:13 AM 200-301 Exam - Free Questions and Answers - ITExams.com
D. egress traffic

Answer : C

Question 299 ( Network Access )



Refer to the exhibit. The EtherChannel is configured with a speed of 1000 and duplex as full on both ends of channel group 1. What is the next step to configure
the channel on switch A to respond to but not initiate LACP communication?

A. interface range gigabitethernet0/0/0-15 channel-group 1 mode on

B. interface range gigabitethernet0/0/0-15 channel-group 1 mode desirable
C. interface port-channel 1 channel-group 1 mode auto
D. interface port-channel 1 channel-group 1 mode passive

Answer : D

Question 300 ( Network Access ) 

Which command entered on a switch configured with Rapid PVST+ listens and learns for a specific time period?

A. switch(config)#spanning-tree vlan 1 priority 4096

B. switch(config)#spanning-tree vlan 1 hello-time 10
C. switch(config)#spanning-tree vlan 1 max-age 6
D. switch(config)#spanning-tree vlan 1 forward-time 20

Answer : D

https://www.itexams.com/exam/200-301? 32/32