Practice 60 original Cisco CCNA 200-301 questions covering network fundamentals, IP connectivity and services, security, automation, and troubleshooting, with answers and explanations.
Level: Cisco CCNA 200-301Difficulty: intermediate60 questions60 min
Choose a practice mode, answer each Cisco CCNA 200-301 question, then review the explanation. Wrong answers are saved locally for review.
Day streak: 0 daysSaved only on this device
Progress0 / 60
Time left: 00:00
No wrong answers saved yet.
No questions match your filters.
Question 1
What does the OSI model do?
The OSI model divides network communication into seven layers so vendors can design interoperable equipment. It is a conceptual framework, not an encryption or addressing system.
Question 2
At which OSI layer does IP operate?
IP operates at Layer 3, the network layer, where logical addressing and routing happen. TCP and UDP operate at Layer 4, and Ethernet operates at Layer 2.
Question 3
At which OSI layer do TCP and UDP operate?
TCP and UDP are transport-layer protocols. They provide end-to-end communication between applications. IP is at the network layer below them.
Question 4
What is a MAC address?
A MAC address is a unique hardware address assigned to a network interface. IP addresses are logical and can change, while MAC addresses identify the local interface.
Question 5
What is an IP address used for?
An IP address provides logical addressing that routers use to forward traffic across networks. MAC addresses identify local interfaces, and encryption is separate.
Question 6
What does a subnet mask do?
A subnet mask defines which bits of an IP address identify the network and which identify the host. It is essential for routing and subnetting.
Question 7
How many bits are in an IPv4 address?
IPv4 addresses are 32 bits long and are usually written as four octets. IPv6 uses 128 bits, and MAC addresses use 48 bits.
Question 8
How many bits are in an IPv6 address?
IPv6 addresses are 128 bits long, allowing many more addresses than IPv4. They are written in hexadecimal groups separated by colons.
Question 9
What is Ethernet?
Ethernet is the most common LAN technology. It uses frames, MAC addresses, and CSMA/CD or full-duplex operation on wired networks.
Question 10
A switch operates at Layer 2 of the OSI model.
This statement is true. A switch forwards Ethernet frames based on MAC addresses, which is Layer 2 behavior. Routers operate at Layer 3.
Question 11
What is a VLAN?
A VLAN separates devices into logical broadcast domains even when they share the same switch. It improves security and reduces unnecessary broadcast traffic.
Question 12
What does a trunk port do?
A trunk port carries traffic for multiple VLANs between switches using VLAN tagging. Access ports carry traffic for a single VLAN.
Question 13
What is a broadcast domain?
A broadcast domain includes devices that receive each others broadcast frames. VLANs create separate broadcast domains.
Question 14
What is a collision domain?
A collision domain is a segment where frames can collide during transmission. Switches break up collision domains by providing dedicated bandwidth to each port.
Question 15
What is a duplex mismatch?
A duplex mismatch occurs when one device operates full duplex and the other half duplex. It causes collisions, errors, and poor performance on the link.
Question 16
Which cable is used for a Cisco console connection?
A rollover cable connects a computer to the console port of a Cisco device for initial configuration. Straight-through and crossover cables are used for network links.
Question 17
Which cable connects two switches when auto-MDIX is disabled?
Without auto-MDIX, a crossover cable is used to connect similar devices such as two switches. Straight-through cables connect different device types.
Question 18
Which device forwards packets between different networks?
A router forwards packets between networks using IP addresses. Switches forward frames within a LAN, and hubs and repeaters work at the physical layer.
Question 19
MAC addresses are 48 bits long.
This statement is true. A MAC address is 48 bits and is normally written as six hexadecimal pairs. It is a hardware address on the network interface.
Question 20
IPv4 addresses are ___-bit.
IPv4 uses 32-bit addresses divided into four octets. This limits the total IPv4 address space and is why IPv6 uses 128-bit addresses.
Question 21
What is a default route?
A default route, often 0.0.0.0/0, is used when no more specific route matches the destination. It is common on routers that send traffic toward the internet.
Question 22
What is static routing?
Static routing requires an administrator to manually configure routes. Dynamic routing protocols learn routes automatically through updates.
Question 23
What is dynamic routing?
Dynamic routing uses protocols such as OSPF to exchange routing information and learn routes automatically. This reduces manual configuration.
Question 24
What type of routing protocol is OSPF?
OSPF is a link-state routing protocol. It builds a complete map of the network and calculates the best paths using cost.
Question 25
What does a routing table contain?
A routing table stores known destination networks, next hops, and interfaces. Routers use it to forward packets toward their destination.
Question 26
What is inter-VLAN routing?
Inter-VLAN routing allows devices in different VLANs to communicate. It can be done with a router on a stick or a Layer 3 switch.
Question 27
What is a next hop?
A next hop is the IP address of the next router toward a destination. Routing entries include a next hop and outgoing interface.
Question 28
What is administrative distance?
Administrative distance ranks the trustworthiness of routing information. Lower values are preferred, such as static routes over OSPF routes.
Question 29
What does DHCP do?
DHCP automatically provides IP addresses, subnet masks, gateways, and DNS servers to clients. DNS resolves names, and routing forwards packets.
Question 30
What is a DHCP reservation?
A DHCP reservation always assigns the same IP address to a specific MAC address. It is useful for servers and printers that need a stable address.
Question 31
What does DNS do?
DNS translates hostnames such as example.com into IP addresses. DHCP assigns addresses, and QoS prioritizes traffic.
Question 32
What is NAT?
NAT translates private addresses to public addresses so devices can reach the internet. PAT is a form of NAT that also uses ports.
Question 33
What is PAT?
PAT maps many private addresses to one public IP using different source ports. It is commonly called NAT overload.
Question 34
What does NTP do?
NTP keeps device clocks synchronized with a time source. Accurate time is important for logging, authentication, and troubleshooting.
Question 35
What is QoS used for?
QoS classifies and prioritizes traffic so important applications receive better treatment. It does not encrypt or replace routing.
Question 36
What does Syslog do?
Syslog sends and stores log messages from devices. Administrators use logs to monitor events and troubleshoot problems.
Question 37
What is SNMP used for?
SNMP lets management systems monitor device status and collect metrics. It is a network management protocol, not routing or addressing.
Question 38
OSPF is a link-state routing protocol.
This statement is true. OSPF builds a link-state database and computes shortest paths using cost. It is a common interior gateway protocol.
Question 39
A route used when no other route matches is called a ___ route.
A default route is used as a fallback when the routing table has no more specific match. It is often configured as 0.0.0.0/0.
Question 40
What is a static route?
A static route is manually entered by an administrator. It includes the destination network, prefix, and next hop or outgoing interface.
Question 41
What is an ACL?
An access control list contains permit or deny rules that filter packets. ACLs are used for security and traffic control on routers and switches.
Question 42
What does a standard ACL filter on?
A standard ACL filters traffic based on source IP address. Extended ACLs can filter by source, destination, protocol, and ports.
Question 43
What can an extended ACL filter on?
Extended ACLs provide more granular filtering using source and destination addresses, protocols, and port numbers.
Question 44
What is port security?
Port security restricts which MAC addresses can send traffic on a switch port. It helps prevent unauthorized devices from connecting.
Question 45
What does DHCP snooping do?
DHCP snooping filters DHCP messages and blocks untrusted rogue DHCP servers. Trusted ports are usually uplinks to legitimate servers.
Question 46
What is a VPN?
A VPN encrypts traffic between endpoints over a public network. It provides confidentiality and integrity for remote connections.
Question 47
What is VLAN hopping?
VLAN hopping is a security attack that tries to send traffic into a different VLAN. Disabling unused trunk ports and using native VLAN hardening reduce the risk.
Question 48
What does AAA stand for?
AAA is a security framework that verifies identity, grants permissions, and records activity. It is commonly used with RADIUS or TACACS+.
Question 49
What is SDN?
SDN separates the control plane from the data plane and centralizes control in software. It enables programmatic network management.
Question 50
What does a controller do in SDN?
An SDN controller makes control plane decisions and programs switches through southbound APIs. Switches focus on forwarding data.
Question 51
What is a REST API?
A REST API uses HTTP methods such as GET, POST, PUT, and DELETE to interact with systems. It is common in network automation.
Question 52
What is JSON?
JSON is a text-based data format for exchanging structured information. It is widely used in REST APIs and network automation.
Question 53
What is Ansible?
Ansible is an automation tool that uses YAML playbooks to configure devices. It is popular for network device automation.
Question 54
What is a northbound API?
Northbound APIs connect the SDN controller to applications and business logic. Southbound APIs connect the controller to network devices.
Question 55
What does ping test?
Ping sends ICMP echo requests and measures responses. It tests basic IP connectivity between hosts.
Question 56
What does traceroute show?
Traceroute displays each hop along the path to a destination. It helps identify where packets are delayed or dropped.
Question 57
Which command shows interface status on a Cisco device?
show interfaces displays interface status, errors, and counters. show ip route shows routing, and show vlan shows VLANs.
Question 58
Which command displays the routing table?
show ip route displays known routes in the routing table. Other show commands display interfaces, MAC tables, or configuration.
Question 59
What is a common symptom of a duplex mismatch?
A duplex mismatch causes late collisions, runts, and poor throughput. Checking duplex settings on both ends is the correct troubleshooting step.
Question 60
What is a loopback interface used for?
A loopback interface is a virtual interface that is always up. It is used for testing, management, and stable router IDs in protocols like OSPF.