100% Latest & Updated Cisco 200-301 Practice Test Questions, Exam Dumps & Verified Answers!
30 Days Free Updates, Instant Download!
Question 20
A small retail location has one device for broadband routing, several Ethernet ports and Wi-Fi, with no separate campus distribution/core switches. Which integrated topology fits the site?
- A full-mesh WAN connecting many peer branches but supplying no local Wi-Fi or switching
- An integrated SOHO edge device combining broadband routing, Ethernet switching, and Wi-Fi
- A three-tier campus with dedicated access, distribution, and core switching appliances
- An autonomous access point that provides only radio bridging without Internet-edge routing
Explanation
Correct Answer
B:An integrated small-office edge gateway can combine WAN routing, multiple local switch ports and wireless access in one compact device.
Incorrect Answers
A:Mesh WAN topology specifies intersite transport and is unrelated to consolidating local router, LAN ports and Wi-Fi into one retail appliance.
C:Dedicated three-tier campus hardware conflicts with the stated absence of separate distribution and core devices at this single small site.
D:An AP bridges wireless clients into a wired VLAN but does not itself necessarily supply the integrated broadband routing and multiple switched LAN ports required.
Question 21
A firm must host database servers on equipment inside its own server room and retain physical access to, power control of, and responsibility for that hardware. Which deployment model best matches the location requirement?
- A public-cloud virtual machine running on provider-owned servers in a remote region
- A SaaS database service administered through a provider web console
- An on-premises deployment on servers in the firm's controlled server room
- A third-party colocation rack hosted in a remote provider facility
Explanation
Correct Answer
C:On-premises means the organization physically hosts the computing hardware within its own premises; the stated location and direct hardware control fit that model.
Incorrect Answers
A:Public-cloud VMs can provide configurable compute, but the underlying physical servers remain at the provider's facility rather than the firm's room.
B:SaaS moves application operations to the provider and does not place the servers in a company-controlled physical room.
D:Colocation can offer customer-owned hardware, but the racks are inside an external operator's facility, not the specified company server room.
Question 22
A retail company must add Linux VM capacity for a two-week holiday sale, then release it without buying and installing physical servers. Which computing deployment model enables this elastic external capacity?
- Provision on-demand cloud virtual machines and deallocate them after the surge
- Expand only its existing fixed on-premises hypervisor hardware with no spare RAM
- Buy permanently dedicated racks for the seasonal surge and keep them powered year-round
- Move all customer workstations onto a physically separate VLAN without adding compute
Explanation
Correct Answer
A:Infrastructure-as-a-service VM capacity can be requested for the temporary peak and released afterward, avoiding physical server purchases and installation.
Incorrect Answers
B:On-premises virtualization cannot create needed physical RAM or CPU capacity from a host whose resources are already exhausted.
C:Permanent rack acquisition defeats the request for temporary elastic allocation without buying extra servers.
D:Layer 2 VLAN segmentation changes client network membership; it cannot provide the additional application VM compute required by the seasonal demand.
Question 23
A manufacturer operates a private-cloud application platform in its own data center but needs workloads to move to an integrated public cloud during seasonal demand. Which deployment model joins these two environments?
- A pure public-cloud deployment that retires all private resources
- A private-cloud-only design with no public-cloud capacity
- A hybrid-cloud architecture integrating private and public cloud resources
- A spine-leaf physical switching fabric with no cloud-service integration
Explanation
Correct Answer
C:Hybrid cloud combines private and public environments with integration for moving workloads or sharing services across them.
Incorrect Answers
A:Moving everything to public cloud would remove the mandated private-cloud platform, so it is not the hybrid operating model.
B:A private-only deployment cannot place burst capacity on the external provider required by the scenario.
D:A spine-leaf fabric can underlie a data center but by itself does not integrate two cloud deployment environments.
Question 24
Six small branches must route interbranch traffic through headquarters for centralized inspection. The design must avoid direct branch-to-branch overlay paths. Which WAN topology meets that requirement?
- Full mesh, with every branch maintaining a direct path to every other branch
- Hub-and-spoke, with headquarters as the hub and branches as spokes
- Spine-leaf, with every branch treated as a data-center leaf switch
- A collapsed-core campus combining the headquarters distribution and core functions
Explanation
Correct Answer
B:In hub-and-spoke, spoke sites use the hub for interspoke reachability so policy services at headquarters can inspect those flows.
Incorrect Answers
A:Full mesh permits direct branch-to-branch tunnels, defeating centralized inspection through headquarters.
C:Spine-leaf describes a data-center switching fabric, not the mandated branch overlay with centralized transit.
D:Collapsed core combines campus distribution and core roles, but it does not determine how independent branch offices must route their overlay traffic.
Question 25
Two permanent branch offices already have ordinary Internet access. They must exchange private subnet traffic confidentially without purchasing a dedicated private carrier circuit. Which WAN design meets the confidentiality and site-to-site requirement?
- A site-to-site IPsec VPN between security gateways at the two offices
- A conventional three-tier switching hierarchy at both campuses without a tunnel
- A standard unencrypted public Internet route between the private networks
- A spine-leaf data-center fabric within only the headquarters building
Explanation
Correct Answer
A:A site-to-site IPsec VPN builds an encrypted authenticated tunnel over public IP connectivity between the fixed networks.
Incorrect Answers
B:A layered campus design organizes local switching but does not protect data between offices across the public Internet.
C:Merely routing packets over the public Internet does not provide the encrypted site-to-site protection required.
D:A data-center fabric improves local east-west reachability, not a protected interoffice Internet overlay.
Question 26
Two campus buildings are 2 km apart and need a standards-compliant 10 Gb/s fiber uplink. Compatible 10GBASE-LR 1310-nm optics are already selected at both ends. What transmission medium is appropriate for the specified reach?
- OM1 multimode fiber with the same LR optics, assuming all LC connectors guarantee two-kilometre reach
- Cat6 copper twisted pair patched directly into both LC optical transceivers
- Single-mode fiber with matching optics
- Two 850-nm short-reach multimode transceivers without changing the two-kilometre optical plant
Explanation
Correct Answer
C:Single-mode fiber has a much smaller optical core and is commonly paired with long-reach transceivers for building-to-building links. Both ends still need optics with compatible wavelength, connector and power budget; fiber type alone does not guarantee link establishment.
Incorrect Answers
A:Connector fit alone does not supply the modal and optical-loss characteristics required by the chosen long-reach single-mode transceivers.
B:Optical LC ports transmit light and cannot accept a copper RJ-45 transmission path without replacing the physical interface modules.
D:Short-reach 850-nm multimode modules are designed for much shorter links and do not meet the specified long-reach path.
Question 27
Two compatible Cisco SFP-10G-SR transceivers must be linked across an installed 100-meter OM3 cable route. Both optics operate at 850 nm and support the planned reach. Which cabling medium is the intended match?
- An 850-nm-compatible OM3 multimode fiber pair with correct connectors
- A copper RJ-45 Cat5e patch cord attached directly to the optical cages
- A 1310-nm single-mode-only LR optical module in place of each installed SR module
- A duplex single-mode-only cable assumed interchangeable with the specified OM3 plant
Explanation
Correct Answer
A:Cisco SR optics use 850-nm multimode fiber, and 100 meters is within the specified OM3 SR reach; compatible connectors and crossed optical paths are still required.
Incorrect Answers
B:An optical SR transceiver emits and receives light and cannot use an RJ-45 copper Ethernet lead as its transmission medium.
C:Replacing SR with LR changes the hardware and optical characteristics, and is not an answer to selecting cabling for the specified installed SR pair.
D:An installed OM3 multimode route is not single-mode fiber; selecting single-mode-only cabling would not match the specified plant and SR equipment.
Question 28
A desktop and an access switch both present 1000BASE-T RJ-45 electrical ports, and the work area is 25 meters from the wiring closet. Which cabling medium directly joins those compatible Ethernet PHYs?
- Copper twisted-pair Ethernet cable
- Use a duplex LC multimode jumper without replacing either RJ-45 electrical interface
- Use a single-mode fiber pair connected through passive RJ-45 adapters
- Use twinax direct-attach copper with SFP+ connectors that do not fit the RJ-45 interfaces
Explanation
Correct Answer
A:Twisted-pair Ethernet uses copper pairs and a compatible electrical PHY, often presented as an RJ-45 port on desktops and switches. Optical multimode or single-mode cable cannot directly replace this medium without matching optical interfaces.
Incorrect Answers
B:Both endpoints expose copper 1000BASE-T ports and cannot directly terminate an optical fiber.
C:Passive adapters cannot convert electrical 1000BASE-T signaling into optical light.
D:A DAC is a different physical port and transceiver format, not the stated standard copper 1000BASE-T link.
Question 29
A switch has an SFP+ cage but no installed optic, and a fiber uplink must match the port speed, medium and optic wavelength at the far end. Which modular interface component is needed?
- Install a passive LC connector into the empty SFP+ cage with no optical transceiver
- An SFP/SFP+ transceiver matching the interface
- Use an SFP module for a different speed/wavelength and assume physical fit is sufficient
- Choose a copper RJ-45 patch lead and connect it directly to the empty fiber SFP+ slot
Explanation
Correct Answer
B:An SFP or SFP+ module must be supported by the host port and match the peer speed, fiber/copper medium and optics. A physically fitting module with the wrong wavelength or rate can leave the link down despite insertion.
Incorrect Answers
A:A fiber connector alone cannot turn the host cage into a laser receiver/transmitter; a supported module is needed.
C:A module must be compatible with the host cage and the peer optics/link medium at both endpoints.
D:An empty SFP+ cage is not an RJ-45 electrical 1000BASE-T port.
Question 30
A duplex fiber link has compatible optical modules and correct wavelengths at both ends. A cable audit discovers the patch connects Tx at switch A to Tx at switch B, and Rx to Rx. What is the specific physical correction?
- Cross-connect each transceiver Tx to the opposite transceiver Rx
- Change the routed static default route on the switches
- Increase the VLAN trunk allowed list on both ports
- Add an Ethernet collision-detection setting to both full-duplex optical interfaces
Explanation
Correct Answer
A:A standard two-fiber optical link needs each transmitter to feed the receiver at the far end; Tx-to-Tx and Rx-to-Rx cannot provide this path.
Incorrect Answers
B:A Layer 3 route change cannot remedy an optical transmitter patched into another transmitter.
C:Trunk VLAN allowances operate above physical link establishment and do not fix mispatched optical pairs.
D:Modern full-duplex optical Ethernet does not use collision-detection settings to repair crossed optical fiber paths.
Cisco Certified Network Associate (CCNA) (200-301) Practice Tests