Cisco Certified Network Associate (CCNA) · Domain 2 · 20% of exam

Network Access

Drill 20 practice questions focused entirely on Network Access for the Cisco 200-301 exam. Tap an answer for instant feedback and a full explanation — no sign-up, always free.

Verified answer20 questions
Question 1 of 20

A network technician is connecting a new employee's PC to switch port GigabitEthernet0/5. The PC must reside in VLAN 30 (the Sales VLAN), which already exists on the switch. The PC's NIC does not support 802.1Q tagging. Which set of interface commands correctly configures the port for this single-VLAN connection?

Reviewed for accuracy · Report an issue
Question 2 of 20

You are documenting a new network and cannot physically access the wiring closet. From switch SW1, you run 'show cdp neighbors detail' and see an entry showing Device ID 'SW2', Platform 'cisco WS-C2960', with 'Interface: GigabitEthernet0/1, Port ID (outgoing port): GigabitEthernet0/24'. Which conclusion is correct based on this output?

Reviewed for accuracy · Report an issue
Question 3 of 20

A network technician arrives at a remote site to configure a brand-new Cisco switch that has just been powered on for the first time. The switch has no IP address, no VLAN configuration, and no user accounts. The technician needs to perform the initial configuration. Which access method must be used to reach the switch CLI in this situation?

Reviewed for accuracy · Report an issue
Question 4 of 20

You are configuring a Layer 2 EtherChannel between two Cisco switches, SW1 and SW2, using LACP. On SW1 the two member interfaces are set with 'channel-group 1 mode passive'. Which LACP mode must you configure on SW2's member interfaces so that the port channel comes up successfully?

Reviewed for accuracy · Report an issue
Question 5 of 20

You are bundling two links between SW1 and SW2 into a Layer 2 EtherChannel. On SW1 both interfaces are configured with 'channel-group 1 mode on'. On SW2 both interfaces are configured with 'channel-group 1 mode active'. After the configuration, the port-channel does not come up and the individual interfaces show as err-disabled or independent. What is the cause of this problem?

Reviewed for accuracy · Report an issue
Question 6 of 20

You are connecting two multilayer switches, DIST1 and DIST2, with two 10-Gbps links that you want to bundle into a single routed Layer 3 EtherChannel to carry inter-switch routing traffic. On DIST1 you enter the following on the physical interfaces and the port-channel: the interfaces are added to channel-group 1, but the port-channel refuses to form an IP adjacency and 'show etherchannel summary' shows the ports flagged as switchports. Which configuration step ensures the bundle operates as a Layer 3 EtherChannel?

Reviewed for accuracy · Report an issue
Question 7 of 20

A wireless engineer needs to deploy an access point whose sole purpose is to passively scan all channels for rogue devices, interference sources, and security threats. This AP must NOT serve any wireless clients or bridge any data traffic. Which AP mode should the engineer configure on the lightweight access point?

Reviewed for accuracy · Report an issue
Question 8 of 20

A retail company deploys lightweight APs at a remote branch office connected to the central WLC over a WAN link. Corporate policy requires that if the WAN link to the WLC fails, wireless clients at the branch must continue to associate and pass traffic locally to the branch LAN. Which AP mode should the network engineer configure to meet this requirement?

Reviewed for accuracy · Report an issue
Question 9 of 20

A network administrator manages a mixed-vendor environment where Cisco switches connect to third-party servers and routers. CDP is not revealing the non-Cisco devices as neighbors. The administrator wants a standards-based discovery protocol enabled globally so both transmit and receive functions work on all interfaces. Which command should be entered in global configuration mode?

Reviewed for accuracy · Report an issue
Question 10 of 20

A network engineer is examining a Rapid PVST+ topology. Switch SW3 has two paths toward the root bridge. On one interface (Gi0/1), SW3 has the lowest-cost path to the root and this port is forwarding. On a second interface (Gi0/2), SW3 receives superior BPDUs from a neighbor, but this port offers a higher-cost path to the root and is currently in the discarding state as a backup route to the root. What port role has RSTP assigned to Gi0/2?

Reviewed for accuracy · Report an issue
Question 11 of 20

A network technician is examining a switch running Rapid PVST+. On interface GigabitEthernet0/2, the switch has determined this is a non-designated port that provides an alternate path to the root bridge. Because a better path already exists through the root port, this interface is not forwarding frames but is ready to take over quickly if the primary path fails. Which port state is interface GigabitEthernet0/2 currently in?

Reviewed for accuracy · Report an issue
Question 12 of 20

A network technician is connecting workstations and a printer to access ports on a Rapid PVST+ switch. Users complain that when they power on their PCs, DHCP requests time out and they receive APIPA addresses. The technician confirms the ports transition through listening and learning states before forwarding. Which configuration should be applied to the access ports to allow immediate forwarding for these end devices?

Reviewed for accuracy · Report an issue
Question 13 of 20

Four switches are connected in a Layer 2 network running Rapid PVST+ for VLAN 10. The bridge IDs (priority / MAC address) are: SW1 = 32768 / 00:1A:2B:00:00:11, SW2 = 24576 / 00:1A:2B:00:00:22, SW3 = 24576 / 00:1A:2B:00:00:33, SW4 = 28672 / 00:1A:2B:00:00:44. Which switch becomes the root bridge for VLAN 10?

Reviewed for accuracy · Report an issue
Question 14 of 20

A network administrator is hardening a Catalyst switch that is currently managed over Telnet. Company policy requires that all remote CLI management traffic be encrypted, while console access remains available for local troubleshooting. The switch already has an IP address on its management VLAN and a default gateway configured. Which set of actions will enable secure remote CLI management?

Reviewed for accuracy · Report an issue
Question 15 of 20

A network technician configured a trunk link between SW1 and SW2 to carry VLANs 10, 20, and 30. Users in VLAN 20 report they cannot reach devices on VLAN 20 connected to the other switch, while VLANs 10 and 30 work fine. On SW1's trunk interface, the technician sees the output: 'switchport trunk allowed vlan 10,30'. Which command on the SW1 trunk interface will restore VLAN 20 connectivity without removing VLANs 10 and 30?

Reviewed for accuracy · Report an issue
Question 16 of 20

A network technician connects two Cisco switches to carry traffic for multiple VLANs across a single physical link. On SW1, the interface is configured with 'switchport mode trunk'. A colleague asks how frames belonging to VLAN 20 are distinguished from VLAN 30 as they traverse this link. What mechanism does 802.1Q use to accomplish this?

Reviewed for accuracy · Report an issue
Question 17 of 20

Two switches, SW1 and SW2, are connected by an 802.1Q trunk. Users in VLAN 1 on both switches can communicate, but the switch logs on SW1 repeatedly display: '%CDP-4-NATIVE_VLAN_MISMATCH: Native VLAN mismatch discovered on GigabitEthernet0/1 (99), with SW2 GigabitEthernet0/1 (1).' Untagged management traffic is also behaving unexpectedly. What is the most likely cause and correct action?

Reviewed for accuracy · Report an issue
Question 18 of 20

A network administrator is deploying four new switches across a campus. VLANs must be created once on a central switch and automatically propagated to the others so administrators do not have to manually create the same VLANs on every device. Which combination of switch roles best achieves this while allowing the central switch to add, modify, and delete VLANs for the entire domain?

Reviewed for accuracy · Report an issue
Question 19 of 20

A wireless engineer needs to perform an RF site survey in a warehouse before deploying lightweight APs. She wants to use an existing lightweight AP joined to the WLC as a dedicated RF measurement and troubleshooting tool that does NOT serve any wireless clients while it captures spectrum and signal data. Which AP mode should she configure on that access point?

Reviewed for accuracy · Report an issue
Question 20 of 20

A network administrator is using the Cisco WLC GUI to create a new WLAN for guest laptops. The guests need to connect using a shared passphrase without any external authentication server. Under the WLAN's Security > Layer 2 settings, which combination should the administrator configure?

Reviewed for accuracy · Report an issue

More 200-301 practice

Keep going with the other Cisco Certified Network Associate (CCNA) domains, or take a full timed mock exam.

← Back to 200-301 overview