100% Latest & Updated Cisco 200-301 Practice Test Questions, Exam Dumps & Verified Answers!
30 Days Free Updates, Instant Download!
Question 150
Two virtual machines share one physical hypervisor but must connect to different Layer 2 VLANs on its uplink. Their virtual NICs are already installed. Which virtual-network configuration distinguishes their Ethernet segments?
- Assign the same untagged virtual-switch port group to both VMs
- Attach each VM virtual NIC to the correct VLAN-associated virtual-switch port group
- Enable IP routing between all VLANs on the hypervisor to make traffic isolated
- Increase the hypervisor guest-memory reservation for both VMs
Explanation
Correct Answer
B:A virtual switch maps each virtual NIC to a port group with the intended VLAN handling, separating Layer 2 traffic at the host uplink.
Incorrect Answers
A:One shared untagged port group would place both virtual adapters in the same Layer 2 segment, contrary to the isolation requirement.
C:Enabling routing makes inter-subnet connectivity possible and is not a substitute for mapping guest vNICs to the correct VLANs.
D:Guest RAM allocations do not tag Ethernet frames or select which virtual switch broadcast domain a vNIC joins.
Question 151
An Ethernet frame arrives on Gi1/0/2 in VLAN 10 with a previously unseen **source** MAC. What state should the switch learn for later destination-based forwarding?
- Learn the destination MAC from a received frame before that destination has transmitted
- Create an IPv4 ARP mapping to the gateway as the source MAC entry
- Record the source MAC and ingress port in the VLAN MAC table
- Place the previously unseen MAC into every VLAN’s forwarding database
Explanation
Correct Answer
C:When a switch receives a frame, it associates the source MAC with the ingress port in that frame’s VLAN. Learning the source—not destination—builds the table later used to direct known unicast traffic.
Incorrect Answers
A:Switch MAC learning associates the source address of incoming frames with the ingress port; destination is used only for lookup.
B:ARP resolves IP-to-MAC neighbors and is not the mechanism for learning each station’s source MAC and port in a VLAN.
D:MAC learning is VLAN-scoped to the frame’s ingress VLAN, not an all-VLAN global assignment.
Question 152
Gi1/0/5 receives a frame destined for a MAC already learned on Gi1/0/8 in the same VLAN; no loop-prevention block applies. How should the switch forward the known unicast?
- Look up the destination MAC and send via its learned interface
- Flood the known unicast out all VLAN ports despite an existing destination entry
- Send the frame to the destination host’s IPv4 default gateway on another VLAN
- Drop the frame because the destination MAC is known
Explanation
Correct Answer
A:Known-unicast forwarding consults the MAC address table for the destination within the correct VLAN and sends the frame on the learned egress port. Flooding is reserved for broadcast or destinations not yet learned.
Incorrect Answers
B:Flooding is used for unknown unicast or broadcast; a learned destination enables selective forwarding on Gi1/0/8.
C:The frame remains in the same VLAN and destination-MAC switching uses the learned egress without routing.
D:A known destination in a forwarding VLAN should be delivered to its learned interface unless a separate filtering condition exists.
Question 153
A frame enters VLAN 20 from Gi1/0/1, but the target unicast MAC is absent from the VLAN-scoped CAM table. Which forwarding behavior reaches possible receivers without crossing VLAN boundaries?
- Drop all unknown unicast frames immediately without any VLAN-local flooding
- Flood unknown unicast within the VLAN except ingress
- Flood the frame into every VLAN configured on the switch
- Send only to the router’s configured default-gateway MAC
Explanation
Correct Answer
B:For a destination MAC missing from the VLAN table, a switch floods an unknown unicast to eligible VLAN ports except the ingress port. It does not flood into unrelated VLANs, which are separate broadcast domains.
Incorrect Answers
A:Normal Ethernet switching floods unknown unicast within the ingress VLAN until the destination MAC can be learned.
C:VLANs isolate broadcast/unknown-unicast domains, so unknown traffic must not cross into unrelated VLANs.
D:This is a Layer 2 unknown destination frame; a route lookup is not a substitute for VLAN-local unknown-unicast flooding.
Question 154
An Ethernet frame enters a forwarding VLAN 30 access port with destination ff:ff:ff:ff:ff:ff. Which behavior makes the broadcast visible to other eligible ports in that same VLAN?
- Look up ff:ff:ff:ff:ff:ff as a learned unicast destination on one port
- Flood the broadcast frame within the VLAN
- Forward the broadcast to every VLAN on the trunk, including other segments
- Route the broadcast as an IPv4 default gateway packet
Explanation
Correct Answer
B:A frame addressed to ff:ff:ff:ff:ff:ff is Ethernet broadcast, so eligible ports in the same VLAN receive it except the source ingress. This differs from a learned unicast, which can be forwarded selectively.
Incorrect Answers
A:All-ones Ethernet destination is broadcast and must be flooded to eligible forwarding ports in the VLAN.
C:Broadcast scope is bounded by the VLAN and must not leak to unrelated Layer 2 broadcast domains.
D:An Ethernet broadcast is a Layer 2 delivery pattern; it does not imply off-subnet IP routing.
Question 155
An idle dynamic MAC-table record receives no further source traffic for the configured aging interval. Which CAM maintenance event prevents the stale port mapping from persisting indefinitely?
- Permanently keep every dynamic MAC entry until the switch reloads
- Convert every inactive MAC entry into a secure sticky permanent address
- Flood all known unicast traffic indefinitely instead of aging one stale entry
- Age dynamic MAC-table entries
Explanation
Correct Answer
D:Dynamic MAC learning ages out unused entries to reflect topology changes.
Incorrect Answers
A:Aging is designed to remove inactive learned mappings so forwarding can adapt to host movement.
B:Ordinary dynamic CAM learning does not automatically configure persistent sticky port-security identities.
C:Aging invalid entries preserves selective forwarding for active learned destinations and is not equivalent to uncontrolled flooding.
Question 156
A laptop's source MAC was learned on Gi1/0/5 and is now observed as the **source** of new frames on Gi1/0/10 in the same VLAN. Which learned-port update follows?
- Move the learned source-MAC entry to the new ingress interface
- Keep the source MAC associated with Gi1/0/5 indefinitely despite the new observation
- Copy the same MAC simultaneously as a dynamic entry to both Gi1/0/5 and Gi1/0/10
- Change the destination IP route to reflect a source-MAC move within the VLAN
Explanation
Correct Answer
A:Fresh source learning updates the switching table when an endpoint changes attachment.
Incorrect Answers
B:When a source is learned on Gi1/0/10 in the same VLAN, ordinary MAC-learning updates the port mapping.
C:A single learned unicast MAC normally has one current forwarding port per VLAN to avoid ambiguity.
D:This Layer 2 source location update does not require a routed destination-prefix change.
Question 157
On a Layer 2 switch, an unknown unicast arrives on an access port in VLAN 30. A design review requires that the frame never be flooded into VLAN 40. Which forwarding rule is correct?
- Flood only eligible forwarding ports within VLAN 30, excluding the ingress port
- Flood all physically active switch ports regardless of their VLAN membership
- Route the unknown Layer 2 destination MAC as an IPv4 default-route lookup
- Send the frame only to the VLAN 40 spanning-tree root port
Explanation
Correct Answer
A:An unknown destination is flooded within its Layer 2 VLAN, except the receiving interface and any ports not eligible to forward. VLAN 40 is a different flooding domain.
Incorrect Answers
B:Flooding beyond VLAN 30 would cross isolation boundaries and leak traffic into a separate broadcast domain.
C:An unknown unicast MAC lookup is a Layer 2 decision; it is not resolved by routing the destination IP through a default route.
D:The STP root-port role does not make VLAN 40 the correct destination for VLAN 30 unknown unicast.
Question 158
A switch operator needs to identify the VLAN and egress interface associated with a learned station MAC, using the MAC-table display rather than an IPv4 route. Which operational command is appropriate?
- Read show ip route to map the station MAC to an egress port
- Read show arp as if it includes the switchport for every learned station
- Read show interfaces trunk as the station MAC address inventory
- Use show mac address-table and inspect the VLAN and interface
Explanation
Correct Answer
D:The MAC table associates a MAC address and VLAN with a learned switchport.
Incorrect Answers
A:IP routing tables hold destination prefixes and next hops, not VLAN-scoped learned source-MAC entries.
B:ARP can resolve IPv4 addresses to MACs but does not enumerate the specific switch MAC-table interface learning.
C:A trunk command reports VLAN carriage and trunk attributes, not every MAC-to-port association.
Question 159
Two hosts can exchange same-VLAN frames but cannot reach a remote IP subnet; an engineer needs to distinguish the Layer 3 route and ARP/ND adjacency from MAC-switching information. Which independent checks are needed?
- Verify an IP route and ARP or ND separately
- Inspect only show mac address-table and assume every off-subnet next hop exists
- Change VLAN 10’s STP bridge priority without checking IP reachability
- Disable ARP and Neighbor Discovery to force IP routes to forward automatically
Explanation
Correct Answer
A:A MAC entry establishes Layer 2 location, not routed reachability to another subnet.
Incorrect Answers
B:MAC learning shows Layer 2 location but does not prove a usable remote route and ARP/ND adjacency.
C:STP root selection does not directly validate the remote IP destination prefix or gateway resolution.
D:IP forwarding on Ethernet ordinarily needs adjacent next-hop link-layer resolution; disabling it breaks connectivity.
Question 160
A Catalyst switch receives a frame on Gi1/0/7 in VLAN 50 with source MAC 00aa.0011.2233 and destination MAC 00bb.4455.6677. The destination is already learned on Gi1/0/8. Before it forwards this frame, which source-address table update should the switch perform?
- Learn or refresh source 00aa.0011.2233 on ingress Gi1/0/7 in the VLAN 50 MAC table
- Change the VLAN 50 default IPv4 gateway to the source MAC address
- Learn the destination MAC as the source on Gi1/0/7 and overwrite its valid Gi1/0/8 entry
- Install an IP /32 route for the source MAC in the switch routing table
Explanation
Correct Answer
A:Ethernet switches update the VLAN-scoped MAC learning table from the incoming frame source MAC and ingress port. They can then forward the known destination to Gi1/0/8 without flooding.
Incorrect Answers
B:An IP default gateway is a Layer 3 address/route decision, not a replacement for VLAN-scoped Ethernet source-MAC learning.
C:The learned Gi1/0/8 destination location is not rewritten from a frame that only lists that address as its destination. Source learning uses the frame sender, not the receiver.
D:MAC table entries are Layer 2 forwarding records; an IPv4 /32 route represents an IP prefix and cannot be formed from a MAC address.
Cisco Certified Network Associate (CCNA) (200-301) Practice Tests