100% Latest & Updated Cisco 200-301 Practice Test Questions, Exam Dumps & Verified Answers!
30 Days Free Updates, Instant Download!
Question 170
A multilayer switch already contains VLAN 120 and its access ports, but hosts have no routed gateway. Which Layer 3 configuration creates the VLAN 120 default gateway with IP forwarding enabled?
- Set the physical uplink to switchport mode trunk without creating a Layer 3 gateway
- Create VLAN 120 only, leaving it without a Layer 3 interface
- Configure interface vlan 120 with the gateway IP and enable IP routing
- Assign the gateway IPv4 address to an access switchport still in switchport mode
Explanation
Correct Answer
C:A routed SVI and global IP routing replace a separate router-on-a-stick for that VLAN.
Incorrect Answers
A:Trunking transports VLAN-tagged frames between switches but does not supply the VLAN 120 SVI gateway IP.
B:VLAN existence is Layer 2 state and does not make the switch forward between its routed interfaces.
D:A Layer 2 access port cannot act as the VLAN-wide routed gateway; the SVI with routing enabled is needed.
Question 171
VLAN 10 and VLAN 20 each have a valid SVI IP subnet, but a PC in VLAN 10 needs to reach a PC in VLAN 20. Which network function must forward packets across the two broadcast domains?
- Create a trunk for VLANs 10 and 20 but leave all gateways without routing
- Enable a DHCP server for both VLANs without configuring gateways
- Put VLAN 10 and VLAN 20 into one spanning-tree instance
- Enable inter-VLAN routing through gateways for both VLANs
Explanation
Correct Answer
D:IP routing is needed for packets that cross Layer 2 VLAN boundaries.
Incorrect Answers
A:A trunk can carry frames but does not forward packets between the distinct IP subnets by itself.
B:DHCP can provide IP settings but cannot substitute for the Layer 3 routing path between their networks.
C:An STP instance defines loop-free Layer 2 forwarding, not Layer 3 packet forwarding between separate VLAN subnets.
Question 172
A tenant wants its guest and employee Layer 2 segments not to share broadcasts or MAC learning even when carried over one trunk. Which VLAN identity arrangement provides this separation?
- Assign both traffic groups VLAN 20 on distinct physical switch ports
- Place both groups in the same native VLAN on a common trunk
- Use separate 802.1Q VLAN IDs
- Enable separate IPv4 addresses on one SVI while retaining one VLAN
Explanation
Correct Answer
C:Distinct VLAN IDs create separate broadcast and unknown-unicast flooding domains.
Incorrect Answers
A:Separate physical access ports still share the VLAN 20 broadcast and MAC-learning domain.
B:One native VLAN is still one broadcast domain; trunking alone does not isolate the two groups.
D:Multiple routed addresses do not isolate Layer 2 broadcasts or MAC learning within the shared VLAN.
Question 173
An operator needs a concise, non-disruptive summary of VLAN SVI IPv4 addresses and administrative/operational states on a multilayer switch. Which IOS show command directly lists them?
- Run show vlan brief to list VLANs without SVI IP addresses
- Run show interfaces trunk to display the trunk allowed VLAN set
- Use show ip interface brief on the multilayer switch
- Run show spanning-tree vlan 120 to inspect the VLAN forwarding tree
Explanation
Correct Answer
C:The interface summary reports administrative and protocol status of SVIs.
Incorrect Answers
A:VLAN membership is useful but the command does not give the assigned IPv4 addresses and status of routed VLAN interfaces.
B:Trunk state does not give per-SVI assigned IP addresses or administrative/line status.
D:STP reports bridge and port states, not a consolidated IPv4 SVI address/status summary.
Question 174
A desktop on port Gi1/0/7 unexpectedly joins VLAN 40 instead of VLAN 20. The operator wants to list configured access-VLAN membership without changing it. Which VLAN display is the best first check?
- Run show interfaces trunk to confirm other switches can carry VLAN 20
- Use show vlan brief to inspect access membership
- Run show ip interface brief to read the switch management IP
- Run show mac address-table dynamic and infer access-VLAN settings from learned MACs
Explanation
Correct Answer
B:The show vlan brief output identifies access ports grouped under each VLAN.
Incorrect Answers
A:A trunk view cannot show the current access VLAN membership of desktop port Gi1/0/7.
C:An IP-interface summary does not list which VLAN an access-only physical port belongs to.
D:The MAC table can show learning, but show vlan brief directly reports the configured access-member VLANs.
Question 175
Two switches both have VLAN 50, but clients in VLAN 50 lose L2 reachability across their interswitch 802.1Q trunk because VLAN 50 is missing from the permitted list. What trunk-side correction is needed?
- Allow VLAN 50 on the interswitch trunk
- Change the native VLAN to 50 on both trunk ports while leaving 50 disallowed
- Change all PC access ports to VLAN 1 to bypass the filtered VLAN
- Add an IPv4 static route on one access switch while the Layer 2 VLAN remains filtered
Explanation
Correct Answer
A:Filtering VLAN 50 from a trunk prevents frames for that VLAN from reaching the remote switch.
Incorrect Answers
B:Native VLAN settings do not add the absent VLAN to the explicitly allowed trunk list.
C:Moving clients to another VLAN violates their required segmentation and does not repair VLAN 50 carriage.
D:A route does not reinstate the VLAN-tagged Layer 2 path across the trunk.
Question 176
A Cisco IP phone and a chained PC share a switchport. Untagged PC data must be assigned to VLAN 15 while the phone has a separately tagged voice VLAN. Which data access-VLAN setting is required?
- Set access VLAN 15 on the phone-connected switchport
- Set switchport voice vlan 15 without configuring an access data VLAN
- Configure VLAN 15 as the trunk native VLAN on an unrelated uplink
- Configure only an SVI IP address for VLAN 15 on the distribution switch
Explanation
Correct Answer
A:A phone can pass the PC’s ordinary untagged traffic into the switchport access VLAN.
Incorrect Answers
B:The voice VLAN is independently tagged by the phone; the untagged PC traffic must map to the access VLAN 15.
C:The phone-connected access port is the ingress point for the untagged PC frames, not an unrelated trunk.
D:An SVI provides a routed gateway but does not assign the untagged desk-facing port to VLAN 15.
Question 177
An access port carries a Cisco phone with its own voice VLAN; an engineer wants to verify what voice VLAN that specific port is configured to advertise. Which port-specific display exposes its switchport mode and voice VLAN?
- Inspect show interfaces switchport for that port voice VLAN
- Inspect show interfaces trunk on every uplink and search for VLAN 115
- Run show vlan brief and take the first VLAN with a phone MAC address
- Run show spanning-tree interface and infer the voice VLAN from its forwarding role
Explanation
Correct Answer
A:Operational switchport output distinguishes the voice VLAN from the ordinary data access VLAN.
Incorrect Answers
B:The trunk list does not report the port-specific configured switchport voice VLAN on the phone edge port.
C:A VLAN summary is not the direct switchport voice-VLAN configuration and may not identify the phone service.
D:STP forwarding state cannot substitute for the configured voice VLAN field of the port.
Question 178
VLAN 115 already exists and a workstation in VLAN 115 has just sent frames. The technician must verify its learned source MAC and physical attachment, rather than merely check VLAN creation. Which command is most direct on Cisco IOS?
- show mac address-table dynamic vlan 115
- show vlan brief
- show interfaces trunk
- show ip route connected
Explanation
Correct Answer
A:The dynamic MAC address table scoped to VLAN 115 identifies learned MAC addresses and their associated forwarding interfaces.
Incorrect Answers
B:The VLAN listing shows membership and existence but not the specific dynamic source MAC learned from the workstation.
C:The trunk summary identifies VLAN carriage and trunks, not the access workstation’s learned source-MAC entry.
D:The IPv4 routing table shows connected Layer 3 prefixes, not Layer 2 MAC-to-port mappings.
Question 179
Catalyst interface Vlan115 has the correct IPv4 gateway address and is not shutdown, but reports line protocol down. VLAN 115 exists; no active switchport currently forwards traffic in that VLAN. Which Layer 2 condition should be restored so the SVI can become operational?
- Bring at least one VLAN 115 Layer 2 member or allowed trunk into an active forwarding state
- Remove the correct VLAN 115 IP address from the SVI without changing any VLAN port state
- Change the WAN router's unrelated default route while leaving VLAN 115 without an active member
- Change the PC access VLAN to 1 to avoid using VLAN 115
Explanation
Correct Answer
A:SVI line protocol depends on the VLAN being active and having usable forwarding Layer 2 participation on many Catalyst platforms; restore an eligible up forwarding port or trunk carrying VLAN 115.
Incorrect Answers
B:Deleting the gateway's address removes routed service and does not cause VLAN 115's inactive Layer 2 membership to forward.
C:A remote IP default route does not turn an SVI line protocol up when there is no operational VLAN member on the local switch.
D:Moving clients to VLAN 1 changes their broadcast domain and fails the requirement to restore the intended VLAN 115 gateway.
Question 180
A multilayer switch has VLAN 115 access ports but no routed default gateway for 10.115.0.0/24. Which interface type must be created and assigned the gateway address?
- Configure only switchport voice vlan 115 on the IP-phone access ports
- Add VLAN 115 to an uplink trunk while leaving it without an IP gateway
- Create a static route to 10.115.0.0/24 through an unrelated WAN gateway
- Create an SVI for VLAN 115 with the correct subnet address
Explanation
Correct Answer
D:The VLAN 115 SVI terminates and routes traffic from the voice subnet.
Incorrect Answers
A:Voice VLAN tagging separates frames but does not create an SVI with the IP gateway for subnet 10.115.0.0/24.
B:Transporting the VLAN does not establish Layer 3 default-gateway reachability.
C:Routing through a remote next hop is not a replacement for the connected VLAN 115 SVI gateway on this switch.
Cisco Certified Network Associate (CCNA) (200-301) Practice Tests