mcAfee Secure Website
23

Cisco 200-301 Bundle

Exam Code: 200-301

Exam Name Cisco Certified Network Associate (CCNA)

Certification Provider: Cisco

Corresponding Certification: CCNA

200-301 Training Materials $44.99
Pass4sure Q&A Sample #1 Pass4sure Q&A Sample #2 Pass4sure Q&A Sample #3 Pass4sure Q&A Sample #4 Pass4sure Q&A Sample #5 Pass4sure Q&A Sample #6 Pass4sure Q&A Sample #7 Pass4sure Q&A Sample #8 Pass4sure Q&A Sample #9 Pass4sure Q&A Sample #10

Reliable & Actual Study Materials for 200-301 Exam Success

The Latest 200-301 Exam Questions as Experienced in the Actual Test!

  • 24
    Questions & Answers

    200-301 Questions & Answers

    760 Questions & Answers

    Includes questions types found on actual exam such as drag and drop, simulation, type in, and fill in the blank.

  • 25
    200-301 Video Course

    200-301 Training Course

    271 Video Lectures

    Based on Real Life Scenarios which you will encounter in exam and learn by working with real equipment.

  • exam =30
    Study Guide

    200-301 Study Guide

    1969 PDF Pages

    Study Guide developed by industry experts who have written exams in the past. They are technology-specific IT certification researchers with at least a decade of experience at Fortune 500 companies.

exam =32

Cisco Certified Network Associate (CCNA) (200-301) Practice Tests

Guarantee

Satisfaction Guaranteed

Pass4sure has a remarkable Cisco Candidate Success record. We're confident of our products and provide no hassle product exchange. That's how confident we are!

99.3% Pass Rate
Total Cost: $194.97
Bundle Price: $149.98

Purchase Individually

  • exam =34
    Questions & Answers

    Questions & Answers

    760 Questions

    $124.99
    exam =35
  • exam =37
    200-301 Video Course

    Training Course

    271 Video Lectures

    $39.99
  • exam =36
    Study Guide

    Study Guide

    1969 PDF Pages

    $29.99

Cisco 200-301 Practice Test 14

Question 130

A company wants VLAN 90 clients to reach a server in VLAN 100. VLAN trunks work and each VLAN has its own IP subnet, but there is no routed gateway between them. Which configuration enables the required traffic?

  1. Add both VLANs to a trunk and assume trunking performs inter-VLAN routing.
  2. Configure reachable Layer 3 gateway interfaces or SVIs for both VLANs and enable routing.
  3. Enable port security on the server-facing switch port.
  4. Assign the same MAC address to one client in each VLAN.

Explanation

Correct Answer

B:

VLANs are distinct broadcast domains, so packets destined for another subnet require a routing function. A multilayer switch can create gateway SVIs for VLAN 90 and VLAN 100 and route between them, or a router-on-a-stick can supply subinterfaces. Proper host default gateways and ACL policy must also support the path.

Incorrect Answers

A:

802.1Q trunking preserves VLAN identities across links but keeps their Layer 2 traffic separate. Carrying both VLANs does not by itself produce a Layer 3 next hop between their subnets.

C:

Port security limits which MAC addresses are accepted on a port; it does not create inter-subnet routing. It may protect the server edge, but the missing function is a router gateway.

D:

Spoofing MAC addresses cannot make two IP subnets route across VLAN boundaries and risks confusing switch forwarding tables. Address duplication is not a valid gateway substitute.

Question 131

A Cisco access switch should put all four ports Gi1/0/1–4 into VLAN 60 for a new lab. The ports are currently in different access VLANs, but VLAN 60 already exists. What is an efficient configuration approach?

  1. Make the four ports into a Layer 3 static-route group using `ip route` commands.
  2. Leave all ports in their old VLANs and change the switch hostname to VLAN60.
  3. Turn off STP permanently so all four ports automatically join the desired VLAN.
  4. Configure the intended interface range as access ports in VLAN 60 and verify membership and endpoints afterward.

Explanation

Correct Answer

D:

Cisco IOS supports selecting an interface range so the same access-mode and VLAN settings can be applied consistently to several physical ports. The change keeps each device in one untagged data VLAN and reduces per-interface command mistakes. Confirm that none of the ports is a required trunk, voice uplink or special security interface before applying the common policy.

Incorrect Answers

A:

Static routing selects destination IP networks and next hops, not the per-port access VLAN. It does not supply a bulk Layer 2 membership change.

B:

A hostname is a descriptive management property and cannot translate frames from one access VLAN into another. The actual switchport VLAN configuration must change.

C:

STP controls forwarding topology and loop avoidance, not the access-VLAN number assigned to a port. Disabling it can introduce Layer 2 loops without meeting the grouping requirement.

Question 132

A switch correctly assigns data VLAN 30 and voice VLAN 130 on a phone-plus-PC access port. The PC reaches its services but the phone cannot reach the remote call server; `show interfaces trunk` shows the interswitch uplink carries VLAN 30 but excludes 130. What needs attention?

  1. Change the PC access VLAN from 30 to 130.
  2. Disable phone voice VLAN tagging so the call server sees untagged frames.
  3. Configure the call server IPv4 address as the port native VLAN.
  4. Permit approved voice VLAN 130 across the interswitch trunk while preserving VLAN 30.

Explanation

Correct Answer

D:

The phone can tag its voice traffic as VLAN 130 locally, while its attached PC remains in VLAN 30. If the uplink filters VLAN 130, the voice frames cannot cross to the configured routed voice gateway or call server. Adjust and verify the trunk allowed list on the relevant path instead of replacing the correct phone-facing access and voice configuration.

Incorrect Answers

A:

Moving the PC into the voice network breaks the requested voice/data separation and does not open the interswitch trunk for VLAN 130. The restriction is on the uplink.

B:

This collapses the intended traffic classes and abandons the approved voice subnet. It does not repair the missing voice VLAN on the network path.

C:

Native VLAN is an Ethernet tag-classification setting and cannot accept an IP address. The voice VLAN number must be permitted on the trunk.

Question 133

A new access VLAN is created on a multilayer switch, but a host plugged into a port configured as `switchport mode access` in the correct VLAN has no default-gateway address configured. The VLAN and physical link are up. What further configuration allows the host to reach other IP subnets?

  1. Change the host access port to trunk mode and leave the host without a gateway.
  2. Enable CDP on the access port and expect it to assign the workstation a default gateway.
  3. Configure a reachable routed interface or SVI for the VLAN and set the host’s default gateway to its IP address.
  4. Configure Root Guard on the host port as a replacement for an IP gateway interface.

Explanation

Correct Answer

C:

VLAN access membership supplies Layer 2 connectivity within one broadcast domain, not routed access to other IP networks. A router interface or Layer 3 switch SVI provides the necessary subnet gateway, and inter-VLAN routing must be enabled on the device. Verify both the gateway interface state and the host’s matching address configuration.

Incorrect Answers

A:

Ordinary endpoint ports should normally be in a single access VLAN. Tagging does not create Layer 3 routing or tell the host which next hop to use for off-subnet traffic.

B:

CDP advertises neighboring device identity and capabilities, not host IP addressing or inter-VLAN routing. The default gateway still needs an appropriate network configuration source.

D:

Root Guard is a spanning-tree security feature that prevents an unauthorized root change. It does not route packets between VLAN subnets or provide host gateway addressing.

Question 134

An access switch sees a directly connected IP phone using a dedicated voice VLAN but the workstation behind the phone remains in an ordinary data VLAN. The operator wants to verify the phone’s neighbor identity and advertised IP-phone capabilities. Which discovery method is directly useful?

  1. Use `show ip route` to identify the neighbor’s physical switchport and device model.
  2. Disable voice VLAN tagging so the discovery information moves into the workstation’s subnet.
  3. Inspect CDP or supported LLDP-MED neighbor information on the phone-facing switch port.
  4. Change the switch’s OSPF router ID to the phone MAC address.

Explanation

Correct Answer

C:

Cisco Discovery Protocol and LLDP can advertise neighbor identity and selected capabilities across an Ethernet link. On supported phone and switch combinations, LLDP-MED can also carry voice-related network policies. Checking the learned neighbor details complements the existing voice/data VLAN configuration without moving the workstation’s untagged traffic.

Incorrect Answers

A:

An IP routing table describes network reachability and next hops, not the discovery advertisements sent by a directly connected phone. CDP/LLDP provides that local Layer 2 neighbor context.

B:

Discovery protocols operate separately from the need to segment voice and data. Disabling voice tagging can disrupt a working phone service and does not supply the requested capabilities information.

D:

OSPF router IDs identify routing participants and do not reveal an attached IP phone’s discovery advertisement. A host telephone is not an OSPF routing neighbor.

Question 135

An engineer changes switchport Gi1/0/22 to access VLAN 93, but users still fail connectivity. Which `show` command checks access VLAN membership and physical port assignment across the switch?

  1. `show vlan brief` and inspect VLAN membership for the intended access port.
  2. `show ip route` on a Layer 2-only switch.
  3. `show spanning-tree root` only.
  4. `show interfaces status` only, without any VLAN listing.

Explanation

Correct Answer

A:

`show vlan brief` displays VLAN IDs, names, status and associated access ports on a Cisco switch, making it useful for checking whether port Gi1/0/22 is assigned to VLAN 93. It does not replace verification of trunk transport or VLAN gateway reachability, but directly inspects this specific local access membership.

Incorrect Answers

B:

A routing table summarizes Layer 3 destinations, not ordinary switch access-port VLAN membership. It cannot confirm whether this Layer 2 port was moved to the requested VLAN.

C:

STP output can reveal spanning-tree root identity and some port states, but does not directly list all access VLAN membership assignments. A membership-focused show command is required.

D:

Interface status is helpful for link state and sometimes access VLAN summaries, but the stated comprehensive switch VLAN membership verification is directly addressed by `show vlan brief`.

Question 136

A Cisco access switch has an active VLAN 41 with correctly configured desktop ports. After a migration, clients in that VLAN reach each other but not their IP gateway because no routed interface was provisioned. Which IOS feature supplies the VLAN 41 gateway on a multilayer switch?

  1. Set `switchport voice vlan 41` on every PC port.
  2. Create and address interface Vlan41, enable IP routing where required, and verify that SVI is up.
  3. Increase the VLAN numeric ID from 41 to 410.
  4. Enable CDP on the access switch and use neighbor announcements as a gateway.

Explanation

Correct Answer

B:

Switch access membership establishes Layer 2 connectivity only. An SVI provides a routed IP interface for the VLAN subnet, allowing it to act as the default gateway for endpoints once operational. The router still needs routes and policy for any remote networks; an SVI cannot be replaced by merely renaming the VLAN.

Incorrect Answers

A:

The voice VLAN feature controls tagged IP-phone traffic and does not create a Layer 3 subnet gateway for ordinary desktops. It would also misclassify endpoints.

C:

Changing VLAN identifiers does not add a routing interface and would disrupt client membership. The current VLAN already carries local user traffic successfully.

D:

CDP discovers directly connected device identity; it does not route IPv4 packets between VLANs. An operational SVI or router interface is required.

Question 137

A user is plugged into Gi1/0/8 and has a correct IP address for VLAN 30, but `show interfaces switchport` reports Access Mode VLAN: 20 even though VLAN 30 already exists. What change directly repairs this single-port assignment?

  1. Add VLAN 30 as the native VLAN on an unrelated interswitch trunk.
  2. Assign the same IP address to all Layer 3 interfaces on the switch.
  3. Set the STP root bridge MAC address to the user’s workstation MAC address.
  4. Set Gi1/0/8 as an access port in VLAN 30, then verify switchport mode and host connectivity.

Explanation

Correct Answer

D:

An access port forwards untagged endpoint frames within its configured access VLAN. The existing port assignment places the user into VLAN 20 even though the host is addressed for VLAN 30, so Layer 2 neighbor discovery and reachability fail. Updating the port VLAN and verifying the operational membership addresses the observed mismatch.

Incorrect Answers

A:

Native VLAN handling on a trunk does not change the access membership of Gi1/0/8. The local workstation is still placed into VLAN 20 until the actual port configuration changes.

B:

Duplicate interface IP addresses would create routing conflicts and do nothing to correct the access port’s VLAN membership. The interface is misclassified at Layer 2.

C:

Root elections use configured bridge IDs and BPDUs, not a user endpoint’s interface address as a fix for membership. The required change is a switchport VLAN assignment.

Question 138

A workstation in VLAN 70 can reach peers in its subnet, but its configured default gateway is a switch SVI address that belongs to VLAN 71. What correction is needed?

  1. Give the PC a second public DNS server while retaining the wrong gateway.
  2. Increase the STP priority of the access switch.
  3. Configure the workstation default gateway as an active router/SVI address in its own VLAN 70 subnet.
  4. Change VLAN 71 to be the switch native VLAN across all trunks.

Explanation

Correct Answer

C:

An IPv4 host normally resolves its default gateway as a local-link neighbor and forwards off-subnet traffic to that gateway MAC. A gateway IP from another VLAN/subnet is not directly reachable without an existing route, creating a bootstrap problem. Use the intended VLAN 70 routed interface address and verify ARP/ICMP connectivity.

Incorrect Answers

A:

DNS configuration can improve name resolution but cannot deliver packets to an off-link default gateway. The problem is IPv4 next-hop reachability, not resolver availability.

B:

STP root priority can affect forwarding topology but cannot make a mismatched IP gateway address local to the client subnet. Correct host Layer 3 settings first.

D:

Native VLAN selection concerns untagged traffic on 802.1Q trunks and is unrelated to the workstation’s local default gateway subnet. It would change unrelated link behavior.

Question 139

A server connects to a Layer 3 switch routed physical port rather than a switched access port. The engineer needs an IPv4 point-to-point adjacency over this interface. Which command changes its operating mode?

  1. Use `no switchport` on the supported multilayer-switch interface before assigning an IP address.
  2. Configure `switchport mode trunk` as the command that converts the port into Layer 3.
  3. Apply only `switchport access vlan 200` and place an IP address on the same Layer 2 port.
  4. Set `spanning-tree portfast` and assume a routed adjacency is enabled.

Explanation

Correct Answer

A:

On a supported Cisco multilayer switch, `no switchport` converts a physical interface from Layer 2 switchport behavior into a routed Layer 3 interface. It can then receive an IP address and participate in routing like a router port. A VLAN access assignment would instead create a bridged endpoint and is not the requested point-to-point routed connection.

Incorrect Answers

B:

Trunk mode is still Layer 2 switching and adds VLAN tagging capabilities. It does not enable routed-interface IP addressing on the physical port.

C:

A Layer 2 access interface is assigned to a VLAN rather than acting as a directly numbered routed interface. A gateway SVI could route for that VLAN, but the scenario specifically requires a routed physical port.

D:

PortFast concerns spanning-tree state on an edge switchport, not the interface switching/routing mode. It cannot turn a bridged port into an IP next-hop interface.

Question 140

A router-on-a-stick design receives dot1q-tagged frames for VLAN 65 over router physical interface Gi0/3. Which subinterface setting creates the correct VLAN encapsulation for its gateway?

  1. `interface Gi0/3.65`; `ip route 0.0.0.0 0.0.0.0`.
  2. `interface Gi0/3.65`; `encapsulation dot1Q 66`.
  3. `interface Gi0/3.65`; `encapsulation dot1Q 65`; then assign the gateway IPv4 address.
  4. `interface Gi0/3`; `switchport access vlan 65`.

Explanation

Correct Answer

C:

Router-on-a-stick uses logical subinterfaces associated with 802.1Q VLAN IDs on the shared router trunk. The `encapsulation dot1Q 65` line ensures that frames for VLAN 65 are delivered to the correct routed gateway interface. The connected switchport must also carry the VLAN on a trunk; an access port alone would not transport multiple tagged VLANs.

Incorrect Answers

A:

A static default route is not a VLAN tagging instruction and this form is incomplete. It does not establish subinterface encapsulation for the incoming VLAN.

B:

The encapsulation VLAN ID 66 does not match the requested VLAN 65, so its tagged traffic would not reach this intended gateway.

D:

Routed router interfaces do not ordinarily use switchport access membership syntax in this design. A tagged router-on-a-stick gateway requires dot1q encapsulation on a subinterface.