mcAfee Secure Website
23

Cisco 200-301 Bundle

Exam Code: 200-301

Exam Name Cisco Certified Network Associate (CCNA)

Certification Provider: Cisco

Corresponding Certification: CCNA

200-301 Training Materials $44.99
Pass4sure Q&A Sample #1 Pass4sure Q&A Sample #2 Pass4sure Q&A Sample #3 Pass4sure Q&A Sample #4 Pass4sure Q&A Sample #5 Pass4sure Q&A Sample #6 Pass4sure Q&A Sample #7 Pass4sure Q&A Sample #8 Pass4sure Q&A Sample #9 Pass4sure Q&A Sample #10

Reliable & Actual Study Materials for 200-301 Exam Success

The Latest 200-301 Exam Questions as Experienced in the Actual Test!

  • 24
    Questions & Answers

    200-301 Questions & Answers

    760 Questions & Answers

    Includes questions types found on actual exam such as drag and drop, simulation, type in, and fill in the blank.

  • 25
    200-301 Video Course

    200-301 Training Course

    271 Video Lectures

    Based on Real Life Scenarios which you will encounter in exam and learn by working with real equipment.

  • exam =30
    Study Guide

    200-301 Study Guide

    1969 PDF Pages

    Study Guide developed by industry experts who have written exams in the past. They are technology-specific IT certification researchers with at least a decade of experience at Fortune 500 companies.

exam =32

Cisco Certified Network Associate (CCNA) (200-301) Practice Tests

Guarantee

Satisfaction Guaranteed

Pass4sure has a remarkable Cisco Candidate Success record. We're confident of our products and provide no hassle product exchange. That's how confident we are!

99.3% Pass Rate
Total Cost: $194.97
Bundle Price: $149.98

Purchase Individually

  • exam =34
    Questions & Answers

    Questions & Answers

    760 Questions

    $124.99
    exam =35
  • exam =37
    200-301 Video Course

    Training Course

    271 Video Lectures

    $39.99
  • exam =36
    Study Guide

    Study Guide

    1969 PDF Pages

    $29.99

Cisco 200-301 Practice Test 19

Question 180

A customer wants redundant uplink capacity between two switches, but the physical links have different negotiated duplex settings. The operator asks whether LACP by itself makes them a safe single bundle. What is the correct response?

  1. No; correct physical link compatibility and speed/duplex inconsistencies before treating the links as one EtherChannel.
  2. Yes; LACP automatically converts a half-duplex link into full duplex when it receives a PDU.
  3. No, because LACP requires all traffic to be forwarded by a routing protocol before bundling.
  4. Yes; EtherChannel can permanently mix any physical media and duplex settings without validation.

Explanation

Correct Answer

A:

LACP can negotiate eligible members but does not repair mismatched physical link characteristics. EtherChannel members must satisfy platform compatibility rules, including appropriate speed and duplex, to participate safely. Verify individual interfaces first, then confirm the port-channel is up and all intended members are bundled.

Incorrect Answers

B:

LACP negotiates aggregation membership, not the physical Ethernet duplex mechanism on a partner interface. A half-duplex member is not fixed merely by protocol exchange.

C:

LACP operates at link aggregation and does not require OSPF or a routing process to negotiate a Layer 2 port-channel. The observed issue is physical compatibility, not route learning.

D:

A bundle depends on compatible member properties. Treating arbitrary interfaces as interchangeable can lead to suspended members and intermittent traffic.

Question 181

Two switches are configured with matching EtherChannel physical members. One side uses LACP passive and the other also uses passive; no bundle is negotiated. Which change makes the negotiation initiate?

  1. Change both ends to passive again.
  2. Enable PortFast on both interswitch links.
  3. Change at least one side to LACP `active` with otherwise compatible member settings.
  4. Use static `on` on one side and leave LACP passive on the other.

Explanation

Correct Answer

C:

LACP active mode initiates protocol exchanges, while passive mode waits for an active peer. Two passive ends can therefore remain unbundled. Set at least one partner active, then verify speed, duplex, VLAN/trunk and channel-group compatibility so the bundle can form correctly.

Incorrect Answers

A:

Passive peers do not start LACP negotiations with each other, so repeating the existing mode leaves the original failure condition.

B:

PortFast controls STP edge behavior and should not be used to force LACP negotiation. It neither makes a passive peer send LACP PDUs nor corrects channel-mode mismatches.

D:

A static on group does not negotiate LACP, creating a protocol mismatch with a passive LACP peer. The design specifically requires an LACP bundle.

Question 182

A Cisco switch has Gi1/0/1–2 joined in Port-channel10. The operator wants to verify which physical interfaces are bundled, their LACP state and whether any are suspended. What IOS command is useful?

  1. `show vlan brief` only.
  2. `show etherchannel summary`.
  3. `show cdp neighbors` only.
  4. `show ip route` only.

Explanation

Correct Answer

B:

The EtherChannel summary view lists channel groups, protocols and interface flags, making it a compact way to see which members are bundled or suspended. It supports troubleshooting of LACP negotiation and consistency. Physical link status alone cannot prove a member joined the intended logical Port-channel.

Incorrect Answers

A:

A VLAN summary shows access port memberships but not whether multiple interfaces negotiated and joined one logical EtherChannel. Bundle flags are missing.

C:

CDP can identify the remote chassis and local port, but does not show EtherChannel bundled/suspended member flags. It is not the LACP summary tool.

D:

Routing tables may show the Port-channel interface when Layer 3 is involved, but do not list the per-member LACP state the operator requested.

Question 183

Research Lab: two Cisco switch interfaces are configured with `channel-group 7 mode active` on one side and `channel-group 7 mode passive` on the peer. Both are otherwise compatible and operational. What is the correct LACP outcome?

  1. The link becomes an untagged VLAN access port rather than a port-channel.
  2. The devices switch to PAgP because one endpoint is not in LACP passive mode.
  3. The links cannot join because both ends must use mode active.
  4. The compatible members can negotiate an LACP EtherChannel, assuming their link parameters match.

Explanation

Correct Answer

D:

At least one side is set to LACP active (active on the first switch, passive on the second), so negotiation can start. A passive peer can answer active LACP PDUs, and two active peers can exchange them as well. The port-channel will form only if physical speed, duplex, trunk/access characteristics and other compatibility requirements agree.

Incorrect Answers

A:

LACP controls link aggregation, not whether each member operates as a VLAN access or trunk interface. VLAN tagging and port-channel operation are separate configuration properties that must be mutually compatible across members.

B:

PAgP is a different negotiation protocol and does not emerge when LACP peers use active/passive settings. The configured EtherChannel protocol remains LACP, regardless of which side sends first.

C:

Active/active works, but it is not the only negotiable pair. LACP active/passive also operates because one device sends initial LACPDUs and the passive peer can respond.

Question 184

A port-channel is already bundled and carries two VLANs. An engineer configures an allowed-VLAN restriction directly on one individual trunk member but not on the port-channel. Which configuration practice best prevents inconsistent forwarding?

  1. Disable the port-channel interface and leave the member trunks with unrelated allowed VLAN lists.
  2. Apply trunk and allowed-VLAN policy consistently on the logical port-channel using the platform’s supported configuration model.
  3. Change the switch hostname to the same name as the neighbor.
  4. Set `spanning-tree portfast` on every infrastructure trunk to force allowed-VLAN synchronization.

Explanation

Correct Answer

B:

EtherChannel members should operate as one logical interface with consistent forwarding characteristics. In supported designs, the port-channel interface is the appropriate place for common switching policy so changes apply coherently across the bundle. A mismatch between members and logical interface can suspend links or produce unexpected VLAN forwarding.

Incorrect Answers

A:

This removes the intended aggregated uplink and does not create consistent policy among members. The requested service is a functioning bundle with controlled VLAN reachability.

C:

Hostnames do not apply VLAN filtering or coordinate logical EtherChannel policy. They cannot correct a member’s trunk configuration mismatch.

D:

PortFast affects STP edge transition behavior, not the allowed-VLAN settings in a channel. Enabling it indiscriminately on switch-to-switch links can also raise loop risk.

Question 185

A Cisco access switch reports a port in Rapid PVST+ alternate/discarding state, while another port provides the selected route toward the root. What is the alternate port providing?

  1. A redundant loop-free path that can be used if the active topology changes.
  2. The port must forward all flooded frames despite being in discarding state.
  3. The port has been administratively shut down and cannot receive any BPDUs.
  4. The port is the designated forwarding interface for every segment on the VLAN.

Explanation

Correct Answer

A:

An alternate port is not forwarding ordinary data in the current spanning-tree topology because that would create a redundant Layer 2 path. It retains a possible replacement path toward the root bridge for failover. Rapid spanning tree can transition roles after a topology change without treating the discarding state as a permanent physical link outage.

Incorrect Answers

B:

Discarding prevents ordinary data forwarding on that port. Sending flooded frames would defeat the loop prevention objective that caused the alternate role.

C:

A discarding alternate port is not necessarily administratively disabled. It can receive BPDUs and participate in topology selection.

D:

An alternate port is not the selected designated forwarding port. Its purpose is to maintain redundancy without an active Layer 2 loop.

Question 186

Two switches connect by redundant Layer 2 uplinks and a technician enables PortFast on both interswitch trunks hoping to speed convergence. Why is that configuration hazardous?

  1. PortFast forces both switches to negotiate LACP automatically.
  2. PortFast encrypts all BPDUs and makes neighbor discovery impossible.
  3. PortFast changes an 802.1Q trunk into a routed OSPF interface.
  4. PortFast is intended for appropriately validated edge ports and can permit a transient Layer 2 loop when indiscriminately used between switches.

Explanation

Correct Answer

D:

Spanning tree normally controls the transition of switch-to-switch links into forwarding to prevent loops. PortFast is appropriate for end-host edge links that should not participate in downstream bridging. Enabling it without verifying the actual port role can bypass expected safeguards when a switch is attached.

Incorrect Answers

A:

PortFast changes STP transition behavior, not EtherChannel negotiation. It cannot replace LACP configuration or guarantee loop-free aggregation.

B:

It is not an encryption feature, and BPDUs can still be received with appropriate guard settings. The relevant risk is forwarding without proper edge-port validation.

C:

PortFast does not change switchport Layer 2 mode or enable IP routing. The concern is loop prevention on a device-to-device link.

Question 187

A port on a distribution switch is configured with Root Guard. A downstream switch sends superior BPDUs and the port enters root-inconsistent state. What should happen after the superior BPDUs stop?

  1. The port can recover automatically to its normal STP role when superior BPDUs cease, subject to platform behavior.
  2. The port becomes an Ethernet hub and forwards loops until manually reconfigured.
  3. The administrator must erase the VLAN database before any port can recover.
  4. The port permanently changes the whole campus STP root to the downstream switch.

Explanation

Correct Answer

A:

Root Guard prevents a protected designated port from accepting a downstream device as a better root. While superior BPDUs continue, the port is blocked in root-inconsistent state, but this is not the same as an administrative shutdown. When the offending BPDUs stop, the port can recover under normal STP processing.

Incorrect Answers

B:

Root Guard exists to block superior-root takeover and preserve loop-free topology. It does not switch the port into transparent repeating mode.

C:

Root Guard recovery does not require destroying unrelated VLAN definitions. The relevant condition is cessation of superior BPDU reception.

D:

Root Guard blocks that attempted takeover. The downstream superior bridge is not adopted as the root through the protected port.

Question 188

On a Rapid PVST+ switch, a designated port forwards traffic for its LAN segment while the root port provides the switch’s best path to the root bridge. Which property distinguishes a designated port?

  1. It is always the interface with the highest numerical port ID regardless of topology costs.
  2. It is the port a switch administratively shuts down when any BPDU is received.
  3. It is selected to forward traffic from that switch onto its segment as the segment’s best STP path toward the root.
  4. It is a port that cannot forward frames while the switch has a healthy root path.

Explanation

Correct Answer

C:

A nonroot switch normally has one root port, but each Ethernet segment selects a designated bridge and associated designated port to forward for that segment. STP makes that selection by comparing root path costs and tie-breakers. A designated port role is not simply the lowest numbered physical interface on the device.

Incorrect Answers

A:

STP comparisons prioritize root path information and bridge IDs before the port tie-breakers. A large port number does not inherently make the port designated.

B:

That describes a possible BPDU Guard action on a protected edge port, not the general designated port role in STP. Designated ports normally send BPDUs to their segments.

D:

Designated ports are selected forwarding paths on their segments. Alternate or blocking roles are the ones withheld from ordinary data forwarding to prevent loops.

Question 189

A switch has multiple VLANs and engineers intentionally make SW-CORE1 the root for VLAN 10 and SW-CORE2 the root for VLAN 20. What is the purpose of per-VLAN root selection?

  1. Force all VLANs to become one broadcast domain so packets move freely between them.
  2. Choose different loop-free Layer 2 topologies and forwarding paths for different VLANs.
  3. Automatically configure inter-VLAN IP routing without any SVI or router.
  4. Convert every redundant trunk into a permanently forwarding loop on both VLANs.

Explanation

Correct Answer

B:

Rapid PVST+ maintains spanning-tree calculations for each VLAN, so the elected root can differ among VLAN instances. This permits intentional distribution of active uplinks while maintaining a loop-free topology in each broadcast domain. Correct switch priorities and trunk VLAN membership still need coordinated design and verification.

Incorrect Answers

A:

Separate VLANs still provide distinct Layer 2 broadcast domains. Per-VLAN root selection changes forwarding topology, not VLAN isolation.

C:

STP is a Layer 2 loop-prevention protocol and does not provide Layer 3 gateways. Inter-VLAN routing requires separate routed interfaces or SVIs.

D:

The purpose is the opposite: each VLAN retains its own loop-free active path. Different roots do not bypass STP blocking where necessary.

Question 190

A switch is losing BPDUs on a non-designated uplink after a unidirectional fiber problem. The team wants to keep the port from mistakenly transitioning to forwarding and creating a loop. Which protective feature should be considered?

  1. PortFast on every uplink to bypass the BPDU check.
  2. Loop Guard on the appropriate non-designated STP port, validated with the platform configuration.
  3. Increase the allowed VLAN list to every VLAN on the trunk without checking the link.
  4. Disable OSPF authentication between routers upstream.

Explanation

Correct Answer

B:

Loop Guard protects eligible ports that should continue receiving BPDUs from becoming designated forwarding ports merely because BPDUs stop arriving. It can place an affected port into loop-inconsistent state until reception recovers. This is different from BPDU Guard on host-edge ports that should not receive BPDUs at all.

Incorrect Answers

A:

PortFast is designed for validated edge ports and does not protect against unilateral loss of BPDU reception on a redundant interswitch link. It can increase loop exposure when misapplied.

C:

Trunk VLAN policy does not repair the missing-BPDU failure mode. Broadening VLANs may expose more broadcast domains to a loop.

D:

OSPF authentication governs a Layer 3 routing neighbor relationship, not STP BPDUs on a Layer 2 uplink. It cannot implement the requested loop protection.