100% Latest & Updated Cisco 200-301 Practice Test Questions, Exam Dumps & Verified Answers!
30 Days Free Updates, Instant Download!
Question 80
An IOS standard ACL should match exactly one source IP, 10.10.10.50, rather than a subnet. Which wildcard value is correct?
- 0.0.0.255
- 0.0.0.0
- 255.255.255.255
- 0.0.0.1
Explanation
Correct Answer
B:All wildcard bits zero require every source-address bit to match.
Incorrect Answers
A:That matches all addresses in 10.10.10.0/24 with the corresponding base.
C:That wildcard ignores all 32 address bits instead of matching one host.
D:That allows variation in one address bit, matching two addresses.
Question 81
An ACL statement uses the keyword any for the source IPv4 address. Which wildcard mask is mathematically equivalent?
- 0.0.0.0
- 255.255.255.255
- 255.255.255.0
- 0.0.0.255
Explanation
Correct Answer
B:All wildcard bits one ignore every source IP address bit.
Incorrect Answers
A:That requires an exact address match, as with host.
C:That ignores the first three octets but still fixes the final octet.
D:That permits only 256 addresses relative to a specific /24 base.
Question 82
An engineer must create a route for a LAN containing host 192.168.10.243/28. Which correctly aligned prefix names that network?
- 192.168.10.240/28
- 192.168.10.243/28
- 192.168.10.224/28
- 192.168.10.240/27
Explanation
Correct Answer
A:A /28 has increments of 16; .243 belongs to the .240–.255 block.
Incorrect Answers
B:A subnet route uses the aligned network base, not a host address.
C:The .224/28 block ends at .239.
D:That /27 prefix is misaligned; the /27 containing .243 is .224/27.
Question 83
A route filter allows prefix 10.0.0.0/9. Which range of IPv4 destinations matches this exact prefix?
- 10.0.0.0 through 10.127.255.255
- 10.0.0.0 through 10.255.255.255
- 10.0.0.0 through 10.63.255.255
- 10.128.0.0 through 10.255.255.255
Explanation
Correct Answer
A:A /9 fixes the first octet and the top bit of the second octet; the range ends at 127.
Incorrect Answers
B:That is the full 10/8 block, twice as broad.
C:Only 64 second-octet values are included, corresponding to /10.
D:That is the other half of the 10/8 range, not 10.0.0.0/9.
Question 84
An ordinary IPv4 LAN uses /29 instead of /28. How many usable addresses does the /29 provide with network and broadcast reserved?
- 8
- 14
- 4
- 6
Explanation
Correct Answer
D:Three host bits supply eight addresses in /29, of which six are ordinary assignable hosts.
Incorrect Answers
A:This is the total address count including network and broadcast.
B:Four host bits and 14 usable hosts describe /28.
C:The conventional /29 host capacity is not reduced by four reserved addresses.
Question 85
A conventional point-to-point IPv4 subnet needs two ordinary usable addresses with distinct network and broadcast endpoints. Which smallest prefix suffices?
- /30
- /32
- /29
- /31
Explanation
Correct Answer
A:A /30 provides four addresses, including exactly two usable hosts under conventional network/broadcast rules.
Incorrect Answers
B:A /32 describes only one host and cannot supply two separate host addresses.
C:A /29 also works but allocates more addresses than necessary.
D:/31 can be used on compliant point-to-point links under RFC 3021, but does not provide separate conventional network and broadcast endpoints as explicitly required.
Question 86
A firewall policy needs one canonical RFC1918 route covering every privately assigned `10.x.x.x` host. Which CIDR allocation covers 10.0.0.0 through 10.255.255.255 without including unrelated address classes?
- 10.0.0.0/8 RFC1918 private space
- 10.0.0.0/16, covering only the first 65,536 addresses
- 10.0.0.0/7, additionally including all 11.x.x.x addresses
- 10.0.0.0/9, containing only 10.0.0.0 through 10.127.255.255
Explanation
Correct Answer
A:The RFC1918 10.0.0.0/8 allocation includes addresses from 10.0.0.0 to 10.255.255.255. It is not globally routed by default, but the entire 10/8 range—not just one /24—is classified as private.
Incorrect Answers
B:A /16 omits most 10.x.x.x hosts and is not the entire RFC1918 10/8 allocation.
C:A /7 is too broad and includes non-RFC1918 destinations outside the required 10/8 block.
D:A /9 includes only half of the designated 10/8 private allocation.
Question 87
A lab network uses internal addresses from 172.16.0.0 through 172.31.255.255 and must select the exact RFC1918 aggregate, not one ordinary /16. Which allocation is correct?
- 172.16.0.0/12 RFC1918 private space
- 172.16.0.0/16, containing only 172.16 addresses
- 172.16.0.0/11, also including 172.0.0.0 through 172.15.255.255
- 172.16.0.0/13, covering 172.16 through 172.23 only
Explanation
Correct Answer
A:The private 172.16.0.0/12 block ends at 172.31.255.255; adjacent 172.15.x.x and 172.32.x.x addresses are outside it. The first 12 bits define this specific private-use boundary.
Incorrect Answers
B:A /16 omits 172.17 through 172.31, which are part of the RFC1918 /12.
C:That broader aligned /11 includes addresses outside the stated private range.
D:A /13 covers half of the 172.16–172.31 RFC1918 /12 allocation.
Question 88
The home-office network inventory uses 192.168.0.0 through 192.168.255.255 for non-Internet-routed hosts. Which RFC1918 prefix covers that family precisely?
- 192.168.0.0/24, matching only one customer LAN
- 192.168.0.0/16 RFC1918 private space
- 192.168.0.0/15, encompassing more than the designated 192.168/16
- 192.168.0.0/17, covering only the lower half of the 192.168.0.0/16 block
Explanation
Correct Answer
B:The RFC1918 192.168.0.0/16 allocation covers every address from 192.168.0.0 through 192.168.255.255. It does not extend to the neighboring 192.167/16 or 192.169/16 ranges.
Incorrect Answers
A:A /24 contains just 192.168.0.x and excludes the many other 192.168.x networks.
C:A /15 extends into an adjacent /16 and therefore is too broad for the stated private family.
D:A /17 stops before the 192.168.128.x range and cannot contain every requested private address.
Question 89
An ISP wants a dedicated IPv4 space between a subscriber CPE and carrier-grade NAT that is neither RFC1918 enterprise private space nor loopback. Which reserved shared-address prefix serves this purpose?
- 100.64.0.0/10 shared address space
- 100.64.0.0/11, which covers only the lower half of the reserved range
- 100.0.0.0/8, which includes public 100.x allocations outside RFC6598
- 10.0.0.0/8, which is the RFC1918 private rather than RFC6598 shared block
Explanation
Correct Answer
A:The 100.64.0.0/10 block is shared address space intended for service-provider address-sharing deployments, often between subscribers and carrier NAT. It is not one of the three RFC1918 private allocations.
Incorrect Answers
B:The specified RFC6598 shared block uses /10; a /11 covers only 100.64.0.0–100.95.255.255 and omits 100.96–100.127.
C:The whole 100/8 is not reserved as provider-shared address space.
D:RFC1918 10/8 is a separate private reservation and not the dedicated 100.64/10 CGN address space.
Question 90
A diagnostic process must send local-only IPv4 traffic to its own host stack without traversing any Ethernet port. Which reserved IPv4 network is the loopback family?
- 127.0.0.0/16, a subset that omits most of the special loopback allocation
- 127.0.0.0/8 IPv4 loopback space
- 169.254.0.0/16, IPv4 link-local autoconfiguration on one Ethernet
- 0.0.0.0/0, the catch-all IPv4 routing default prefix
Explanation
Correct Answer
B:127.0.0.0/8 is reserved for host-local loopback, not for routing between private LAN devices. Packets addressed to loopback remain on the originating host and do not represent a reachable enterprise subnet.
Incorrect Answers
A:The reserved loopback family is 127.0.0.0/8, not only one /16 within it.
C:Link-local is for on-link communication, not the local host’s loopback 127/8 destination family.
D:The all-zero /0 route covers arbitrary network destinations rather than the loopback-reserved /8 block.
Cisco Certified Network Associate (CCNA) (200-301) Practice Tests