Cisco 200-301 Exam Dumps, Practice Test Questions

100% Latest & Updated Cisco 200-301 Practice Test Questions, Exam Dumps & Verified Answers!
30 Days Free Updates, Instant Download!

Cisco 200-301 Premium Bundle
$79.97
$59.98

200-301 Premium Bundle

  • Premium File: 760 Questions & Answers. Last update: Nov 12, 2026
  • Training Course: 271 Video Lectures
  • Study Guide: 1969 Pages
  • Latest Questions
  • 100% Accurate Answers
  • Fast Exam Updates

200-301 Premium Bundle

Cisco 200-301 Premium Bundle
  • Premium File: 760 Questions & Answers. Last update: Nov 12, 2026
  • Training Course: 271 Video Lectures
  • Study Guide: 1969 Pages
  • Latest Questions
  • 100% Accurate Answers
  • Fast Exam Updates
$79.97
$59.98

Cisco 200-301 Practice Test 17

Question 160

A Catalyst switch receives a frame on Gi1/0/7 in VLAN 50 with source MAC 00aa.0011.2233 and destination MAC 00bb.4455.6677. The destination is already learned on Gi1/0/8. Before it forwards this frame, which source-address table update should the switch perform?

  1. Learn or refresh source 00aa.0011.2233 on ingress Gi1/0/7 in the VLAN 50 MAC table
  2. Change the VLAN 50 default IPv4 gateway to the source MAC address
  3. Learn the destination MAC as the source on Gi1/0/7 and overwrite its valid Gi1/0/8 entry
  4. Install an IP /32 route for the source MAC in the switch routing table

Explanation

Correct Answer

A:

Ethernet switches update the VLAN-scoped MAC learning table from the incoming frame source MAC and ingress port. They can then forward the known destination to Gi1/0/8 without flooding.

Incorrect Answers

B:

An IP default gateway is a Layer 3 address/route decision, not a replacement for VLAN-scoped Ethernet source-MAC learning.

C:

The learned Gi1/0/8 destination location is not rewritten from a frame that only lists that address as its destination. Source learning uses the frame sender, not the receiver.

D:

MAC table entries are Layer 2 forwarding records; an IPv4 /32 route represents an IP prefix and cannot be formed from a MAC address.

Question 161

A Cisco Catalyst port Gi1/0/10 connects to an ordinary PC that transmits untagged Ethernet frames. The PC must be isolated in data VLAN 20, and the port must never dynamically form a trunk. Which interface configuration accomplishes both conditions?

  1. switchport mode trunk; switchport trunk allowed vlan 20
  2. switchport access vlan 20 without setting a fixed switchport mode
  3. interface Vlan20; ip address 10.20.0.1 255.255.255.0
  4. Configure switchport mode access and switchport access vlan 20

Explanation

Correct Answer

D:

The fixed access switchport mode prevents trunk negotiation and makes untagged PC frames members of VLAN 20. The access VLAN setting chooses the Layer 2 broadcast domain without giving the port a routed gateway.

Incorrect Answers

A:

A trunk can carry VLAN 20 but permits 802.1Q trunk behavior and is not the fixed untagged access-port mode required by the PC.

B:

An access VLAN value does not by itself guarantee that a dynamically negotiating interface cannot become a trunk; the stated requirement requires explicit access mode.

C:

An SVI configures a VLAN Layer 3 gateway on a capable switch, but it does not place the physical PC switchport into fixed access mode.

Question 162

A Cisco desk phone tags its voice frames for VLAN 30 while its attached PC must remain an ordinary untagged data device in VLAN 20. The access port is already assigned to data VLAN 20. What additional interface-level VLAN setting identifies the phone voice traffic?

  1. switchport access vlan 30, replacing the existing data VLAN 20
  2. switchport trunk native vlan 30 on this ordinary phone access port
  3. Configure switchport voice vlan 30 on the host-facing port
  4. interface Vlan30 with ip address dhcp

Explanation

Correct Answer

C:

The voice-VLAN command lets the attached Cisco phone identify and tag its voice traffic for VLAN 30 while the workstation remains on the port’s untagged access VLAN 20.

Incorrect Answers

A:

Changing the access VLAN to 30 would move untagged PC frames into the voice VLAN instead of retaining the intended separate data and voice roles.

B:

A trunk native VLAN setting controls untagged frames on a trunk; it does not configure the dedicated access-port voice VLAN announcement to the phone.

D:

An SVI obtains or owns a Layer 3 address for the switch; it does not tell the desk phone which 802.1Q voice VLAN to tag.

Question 163

Users in VLAN 20 can communicate within their VLAN but cannot reach the routed campus network. On a multilayer Catalyst switch, VLAN 20 exists and the host-facing ports already belong to it. Which component supplies the IP default gateway for that VLAN?

  1. switchport access vlan 20 under the existing user ports
  2. switchport trunk allowed vlan 20 under the uplink
  3. Create an operational VLAN 20 SVI with an IP address on a Layer 3 switch
  4. switchport voice vlan 20 on each PC-facing interface

Explanation

Correct Answer

C:

An operational SVI for VLAN 20 provides the default-gateway IP address; with Layer 3 switching enabled and route reachability, traffic can move from VLAN 20 to other subnets.

Incorrect Answers

A:

Assigning a Layer 2 access VLAN connects users to the correct broadcast domain; it does not create an IP gateway capable of routing to other subnets.

B:

An allowed-VLAN list governs transit of tagged traffic across a trunk, but the campus hosts still need an operational Layer 3 gateway.

D:

Voice VLAN tagging is used with IP phones and does not create the requested routed SVI for the existing data VLAN.

Question 164

An engineer wants a non-disruptive read-only inventory of existing VLAN IDs, names and access-port assignments on a Cisco Catalyst switch. Which command is the best first check?

  1. show ip route
  2. show interfaces trunk
  3. Inspect show vlan brief
  4. show running-config interface GigabitEthernet1/0/1

Explanation

Correct Answer

C:

The show vlan brief command displays the Layer 2 VLAN database and associated access interfaces without altering configuration; separate commands are needed to inspect trunk traffic.

Incorrect Answers

A:

A Layer 3 route table describes installed IP forwarding destinations, not a concise database of Layer 2 VLAN names and access port membership.

B:

This lists operational trunk links and VLAN transport states, but it does not replace a VLAN database view of ordinary access port membership.

D:

One interface’s configuration cannot enumerate all VLAN IDs and access port assignments across the switch as requested.

Question 165

VLAN 20 is created and active at both switches, and user access ports belong to it, but the interswitch uplink excludes VLAN 20 from its configured 802.1Q allowed list. Which targeted change restores only the missing transport allowance?

  1. Create interface Vlan20 on one switch without changing the trunk
  2. Configure switchport voice vlan 20 on the uplink
  3. Change the native VLAN to 20 on one switch
  4. Permit VLAN 20 on an operational 802.1Q trunk

Explanation

Correct Answer

D:

The trunk must permit VLAN 20 in the allowed VLAN set and have it active and forwarding; adding that VLAN is distinct from changing access membership, voice VLANs or native VLAN.

Incorrect Answers

A:

An SVI can supply a routed gateway but it does not override the uplink’s VLAN admission restriction for tagged VLAN 20 frames.

B:

A voice VLAN command is for voice-tagged devices on a user-facing access port, not for adding a VLAN to an interswitch trunk allowed list.

C:

Changing the native VLAN affects untagged frame treatment and risks a mismatch; it does not safely add VLAN 20 to a restricted allowed list.

Question 166

A Catalyst 9000 switch must carry Department 120 traffic. VLAN 120 is not present in the local VLAN database, and the engineer must explicitly create and name it before assigning the access ports. Which global-configuration sequence creates the VLAN itself?

  1. interface Vlan120 followed by ip address 10.120.0.1 255.255.255.0
  2. interface GigabitEthernet1/0/12 followed by switchport access vlan 120
  3. vlan 120 followed by name DEPT120 in VLAN configuration mode
  4. interface GigabitEthernet1/0/48 followed by switchport trunk allowed vlan add 120

Explanation

Correct Answer

C:

The global vlan command creates the Layer 2 VLAN; its VLAN configuration submode supports naming it before port assignments.

Incorrect Answers

A:

An SVI may provide an IP gateway for an existing VLAN, but merely configuring its L3 address is not the explicit VLAN database creation and naming operation.

B:

Assigning an access port selects its membership and can implicitly create a VLAN on some platforms, but does not execute the mandated explicit create-and-name action.

D:

The trunk allowed-list command filters the VLANs carried by a trunk, not the global creation and naming of a new VLAN.

Question 167

On a supported Cisco Catalyst access port, `switchport access vlan 120` and `switchport voice vlan 130` are configured for a Cisco IP phone with a desktop connected behind it. The phone follows the switch-advertised voice VLAN mode; the desktop sends ordinary untagged Ethernet. Which frame treatment is correct?

  1. The phone normally tags voice with VLAN 130 while untagged desktop frames belong to access VLAN 120
  2. Both voice and desktop frames must be tagged VLAN 130 because the switchport has a voice VLAN
  3. The desktop traffic is automatically placed in VLAN 1 and voice becomes untagged on VLAN 120
  4. Voice frames are routed into VLAN 130 by the switch even without any VLAN association on ingress

Explanation

Correct Answer

A:

The configured voice VLAN ID tells the Cisco IP phone to send voice traffic using an 802.1Q voice tag; ordinary untagged desktop frames are classified into the configured access VLAN 120.

Incorrect Answers

B:

A PC behind the phone ordinarily sends untagged data. Enabling a separate voice VLAN does not require the PC to tag its traffic as voice.

C:

The access VLAN is explicitly 120, not VLAN 1, and the phone is configured for tagged voice VLAN 130 rather than untagged voice on VLAN 120.

D:

An access switch classifies received Ethernet frames by VLAN; it need not route voice packets just to accept voice VLAN 130 frames on a phone port.

Question 168

Router R1 uses physical GigabitEthernet0/0 as an 802.1Q trunk to SW1. VLAN 120 clients require a gateway of 10.120.0.1/24. Which router-on-a-stick configuration supplies that gateway without consuming a separate physical interface?

  1. interface Vlan120; ip address 10.120.0.1 255.255.255.0 on a router that has no VLAN SVI feature enabled
  2. interface GigabitEthernet0/0; switchport mode access; switchport access vlan 120
  3. interface GigabitEthernet0/0; ip address 10.120.0.1 255.255.255.0 with no 802.1Q subinterface
  4. interface GigabitEthernet0/0.120; encapsulation dot1Q 120; ip address 10.120.0.1 255.255.255.0

Explanation

Correct Answer

D:

The .120 logical interface matches tag 120 using encapsulation dot1Q and gives that VLAN a Layer 3 gateway IP while one physical trunk carries multiple VLANs.

Incorrect Answers

A:

A conventional router-on-a-stick topology routes tagged VLANs through Ethernet subinterfaces, not a Catalyst switch SVI on a different device type.

B:

An access-port command is used on supported switching ports; it does not create a router subinterface that receives 802.1Q tagged VLAN120 traffic.

C:

Putting a single untagged gateway directly on the parent physical interface does not bind tagged VLAN 120 frames to the required routed logical interface.

Question 169

A Catalyst trunk carries VLANs 10,20,120, but remote VLAN 120 traffic does not arrive. Before changing configuration, which read-only command shows active trunk ports and carried VLANs?

  1. Run show vlan brief and infer that any present VLAN is carried over the uplink
  2. Run show interfaces status to check the port link state
  3. Use show interfaces trunk
  4. Run show mac address-table vlan 120 and assume missing entries prove a trunk filter

Explanation

Correct Answer

C:

Trunk status and allowed/active VLAN information are visible in this IOS show command.

Incorrect Answers

A:

The VLAN database reports VLAN existence and access members, not which trunk interfaces allow and forward VLAN 120.

B:

An up link does not prove that VLAN 120 is on its allowed/active/forwarding trunk lists.

D:

MAC learning may be absent for several reasons; it is not the direct trunk allowed/active VLAN report.

Question 170

A multilayer switch already contains VLAN 120 and its access ports, but hosts have no routed gateway. Which Layer 3 configuration creates the VLAN 120 default gateway with IP forwarding enabled?

  1. Set the physical uplink to switchport mode trunk without creating a Layer 3 gateway
  2. Create VLAN 120 only, leaving it without a Layer 3 interface
  3. Configure interface vlan 120 with the gateway IP and enable IP routing
  4. Assign the gateway IPv4 address to an access switchport still in switchport mode

Explanation

Correct Answer

C:

A routed SVI and global IP routing replace a separate router-on-a-stick for that VLAN.

Incorrect Answers

A:

Trunking transports VLAN-tagged frames between switches but does not supply the VLAN 120 SVI gateway IP.

B:

VLAN existence is Layer 2 state and does not make the switch forward between its routed interfaces.

D:

A Layer 2 access port cannot act as the VLAN-wide routed gateway; the SVI with routing enabled is needed.

Cisco Certified Network Associate (CCNA) (200-301) Practice Tests

UP

SPECIAL OFFER: GET 10% OFF

This is ONE TIME OFFER

ExamSnap Discount Offer
Enter Your Email Address to Receive Your 10% Off Discount Code

A confirmation link will be sent to this email address to verify your login. *We value your privacy. We will not rent or sell your email address.

Download Free Demo of VCE Exam Simulator

Experience Avanset VCE Exam Simulator for yourself.

Simply submit your e-mail address below to get started with our interactive software demo of your free trial.

Free Demo Limits: In the demo version you will be able to access only first 5 questions from exam.