100% Latest & Updated Cisco 200-301 Practice Test Questions, Exam Dumps & Verified Answers!
30 Days Free Updates, Instant Download!
Question 200
A port reports trunk mode, but VLAN 100 does not forward because it is absent or blocked. Which `show interfaces trunk` fields show VLANs allowed, active and forwarding rather than just configured mode?
- Use show vlan brief to see access memberships and assume trunk forwarding
- Check active and forwarding VLANs in show interfaces trunk
- Read show interfaces status to learn the physical link speed
- Inspect only the switchport administrative trunk mode
Explanation
Correct Answer
B:The command distinguishes configured allowance from VLANs actively forwarded.
Incorrect Answers
A:VLAN creation/membership does not prove the tagged VLAN is permitted and STP-forwarding on the uplink.
C:An up link with a correct speed can still filter a tagged VLAN because of allowed/active or STP forwarding status.
D:A configured trunk can exclude VLAN 100; the requested fields are the actual allowed/active/forwarding lists.
Question 201
Two Cisco Catalyst switches must carry only VLANs 60 and 70 on one uplink, with all client-facing switchports remaining access ports. Which configuration describes the required interswitch link rather than the edge ports?
- Use access VLAN 60 on both ends of the uplink
- Use a trunk with allowed VLANs 60,70,80
- Use a trunk with allowed VLAN 60 only
- Configure a trunk that allows VLANs 60 and 70
Explanation
Correct Answer
D:An operational 802.1Q trunk with an allowed list containing exactly VLANs 60 and 70 carries both separate VLANs and excludes VLAN 80.
Incorrect Answers
A:A fixed access link transmits one untagged VLAN and does not carry both VLAN 60 and VLAN 70 as distinct tagged traffic.
B:Permitting VLAN 80 violates the specified two-VLAN transport policy.
C:Omitting VLAN 70 prevents the server VLAN from crossing the interswitch link as required.
Question 202
The two peers on an operational 802.1Q trunk use different native VLAN IDs and generate mismatch warnings. No change to the allowed tagged VLANs is required. What correction addresses untagged-frame classification?
- Configure the same access VLAN on unrelated PC-facing ports
- Expand the trunk allowed VLAN list on one switch
- Set the same native VLAN ID on both trunk peers
- Turn off spanning tree on the native VLAN
Explanation
Correct Answer
C:The native VLAN ID must agree at both ends of a trunk to classify untagged frames consistently; changing the allowed list is a separate action.
Incorrect Answers
A:The access VLAN of a workstation port does not define the native VLAN applied to untagged frames on the interswitch trunk.
B:Allowed VLAN membership does not eliminate inconsistent native VLAN IDs; frames may still be assigned to unintended VLANs.
D:Disabling spanning tree is unsafe and does not resolve the underlying untagged VLAN classification mismatch.
Question 203
A secured trunk must stop carrying VLAN 80 but keep VLANs 10 and 20 active. Which VLAN allowed-list edit removes VLAN 80 from that trunk without deleting it globally?
- Issue no vlan 80 in global configuration
- Use switchport trunk allowed vlan remove 80 on that trunk
- Use switchport trunk allowed vlan 10,20,80 again
- Set switchport trunk native vlan 80 without changing the allowed set
Explanation
Correct Answer
B:The remove subcommand excludes VLAN 80 from this trunk’s allowed list while preserving VLANs 10 and 20 and retaining VLAN 80 in the VLAN database for other paths.
Incorrect Answers
A:Deleting VLAN 80 globally removes a VLAN definition and can disrupt access ports rather than restricting one trunk.
C:The proposed list still includes VLAN 80 and fails the security change request.
D:Changing native VLAN does not remove VLAN 80 from the tagged allowed list.
Question 204
An untagged workstation is connected to Gi1/0/12. Security policy prohibits any trunk negotiation or tagging on this client-facing port. Which fixed interface mode should be configured?
- Leave dynamic desirable enabled and rely on DTP to negotiate with the workstation
- Configure switchport mode trunk to carry additional tagged VLANs to the workstation
- Force the workstation-facing switchport into access mode
- Change only the VLAN trunk native VLAN without disabling trunk negotiation
Explanation
Correct Answer
C:For the workstation-facing port, configure switchport mode access so the interface remains a fixed untagged VLAN access port rather than negotiating a trunk.
Incorrect Answers
A:A workstation requiring untagged access is not a trunk peer; dynamic negotiation is unnecessary and does not enforce the fixed access-only policy.
B:A trunk is unnecessary for the untagged single-VLAN client and violates the policy prohibiting endpoint trunk operation.
D:Changing a trunk native VLAN does not make a port a fixed access port or disable dynamic trunk negotiation.
Question 205
An engineer suspects a port has unexpectedly entered trunk rather than access mode. Which read-only switchport output reports its actual operational mode?
- Read show vlan brief and assume a listed VLAN proves port trunk state
- Review show interfaces switchport operational mode
- Run show running-config interface and treat configured dynamic auto as negotiated status
- Read show interfaces counters errors to determine whether DTP formed a trunk
Explanation
Correct Answer
B:The switchport operational mode reveals whether trunking was established.
Incorrect Answers
A:VLAN creation and access-member listings do not identify this port’s operational mode.
C:Administrative configuration may not reflect the current negotiated access/trunk state.
D:Frame counters and errors do not directly identify operational switchport mode.
Question 206
A change reviewer has a read-only CLI session on a Catalyst switch and must determine the operational native VLAN for each currently active trunk. Which display and field directly show this?
- show vlan brief and inspect the Status column
- show interfaces status and inspect the Duplex column
- show ip route and inspect Gateway of last resort
- Run show interfaces trunk and inspect its Native vlan field
Explanation
Correct Answer
D:The show interfaces trunk output includes a Native vlan column for operating trunks and is the most direct read-only summary of untagged VLAN treatment.
Incorrect Answers
A:The VLAN database Status field reports whether a VLAN is active; it is not the operational trunk native-VLAN field.
B:The Duplex field addresses physical interface operation rather than the VLAN ID assigned to untagged trunk traffic.
C:A route table’s default gateway does not indicate any Layer 2 802.1Q native VLAN assignment.
Question 207
A single named Catalyst interface Gi1/0/48 carries mixed tagged VLANs. The engineer needs its configured and operational switchport details, not a switchwide VLAN summary. Which command focuses on that port?
- Run show interfaces switchport for the named interface
- Run show vlan brief to list access members only
- Run show spanning-tree vlan 10 to infer the full interface switchport configuration
- Run show interfaces status to see link and speed, without examining switchport VLAN details
Explanation
Correct Answer
A:The per-interface view shows administrative and operational switching modes.
Incorrect Answers
B:The VLAN database view does not show this named trunk’s configured/admin operational mode, native VLAN, or switchport properties.
C:STP output covers forwarding state but not all DTP, VLAN, trunk and administrative mode details.
D:Physical state alone does not give the specified named interface’s trunk VLAN settings.
Question 208
A Cisco Catalyst switch connects to a manually configured 802.1Q trunk on a third-party switch that does not speak Cisco DTP. The Cisco port is already in `switchport mode trunk`; the operator must keep the trunk operating but stop sending DTP frames. Which additional Cisco interface command meets this requirement?
- `switchport mode dynamic auto` so the non-DTP peer can negotiate
- `switchport trunk allowed vlan none` so no VLAN data or DTP is sent
- `switchport trunk native vlan 1` to suppress negotiation by changing the native VLAN
- `switchport nonegotiate` while retaining the fixed trunk mode
Explanation
Correct Answer
D:Cisco documents `switchport nonegotiate` for an access or fixed trunk interface. Because `switchport mode trunk` is already configured, it disables outbound DTP frames without converting the port to an access port; the non-Cisco side must remain manually configured to trunk.
Incorrect Answers
A:Dynamic auto relies on negotiation and does not establish the fixed trunk needed for a neighbor without DTP support.
B:Restricting the allowed VLAN set to none blocks customer VLAN traffic; it is not the DTP-suppression control requested.
C:Changing the native VLAN affects untagged traffic treatment but does not stop DTP packets.
Question 209
Two Catalyst switches have VLAN 30 present and permitted on an operational interswitch 802.1Q trunk, but only VLAN 30 traffic fails. An operator suspects that spanning tree is discarding this trunk for VLAN 30 while other VLANs still forward. Which read-only IOS command verifies the VLAN-specific STP state before altering the trunk?
- show spanning-tree vlan 30
- switchport trunk allowed vlan add 30
- show ip route 10.30.0.0
- spanning-tree portfast trunk
Explanation
Correct Answer
A:The VLAN-specific spanning-tree display exposes the bridge and port roles and forwarding/discarding state for VLAN 30, so a blocking trunk can be distinguished from an 802.1Q allowlist error.
Incorrect Answers
B:VLAN 30 is already allowed. Re-adding it does not identify or correct an STP discarding state, and the request explicitly asks for read-only evidence.
C:The IPv4 routing table cannot show the Layer 2 per-VLAN spanning-tree port state responsible for blocking this trunk.
D:PortFast trunk changes spanning-tree edge behavior and may create a loop on an interswitch link. It is not the safe read-only diagnostic requested.
Question 210
A Cisco Catalyst trunk uses native VLAN 99. A frame from VLAN 20 is transmitted over this link; VLAN 20 is allowed and is not the native VLAN. How should this frame be represented on the trunk?
- Tag the frame with its non-native 802.1Q VLAN ID
- Transmit the VLAN 20 frame without an 802.1Q tag because 20 is a data VLAN
- Rewrite the VLAN identifier to native VLAN 99 and transmit without a tag
- Strip its VLAN information and use an IPv4 routing header instead
Explanation
Correct Answer
A:An allowed non-native VLAN is identified with an 802.1Q VLAN tag on the interswitch trunk; the native VLAN normally uses untagged transport.
Incorrect Answers
B:The exception for untagged native VLAN traffic does not apply to allowed non-native VLAN 20 frames.
C:That would change the frame’s VLAN association and violate the required isolation of VLAN 20 from VLAN 99.
D:802.1Q Layer 2 trunking does not replace Ethernet VLAN identification with a Layer 3 routing header.
Cisco Certified Network Associate (CCNA) (200-301) Practice Tests
