Free Cisco 200-301 Practice Exam with Questions & Answers | Set: 12

R3(config)#interface Gig0/0 R3(config-if)#ip ospf priority 100. OSPF behavior is controlled by interface state, area, timers, network type, cost, priority, router ID, and neighbor/adjacency rules. Cisco CCNA 200-301 v1.1 includes this under IP Connectivity, where the exam expects engineers to recognize the device behavior that actually produces the required outcome. The question is best solved by reading the operational clue rather than choosing a familiar acronym. The distractors confuse OSPF with unrelated metrics, local-only process values, or parameters that do not satisfy the adjacency or route-selection requirement. In a production network, the wrong choice would normally create an outage, leave a management or security gap, or send troubleshooting toward the wrong subsystem. The selected answer is the one that matches the control-plane, data-plane, wireless, security, services, or automation mechanism described in the question. That is why it remains the verified answer for this item.

Cisco CCNA 200-301 v1.1 Network Fundamentals questions of this type test whether each item is matched to the technology that actually performs that role. The reliable method is to classify each term by operating layer, packet behavior, management function, or security purpose before matching it. Several terms in these items are legitimate Cisco networking concepts, but they become wrong when assigned to the wrong protocol or plane. The mapping retained in the document follows that separation: transport behavior is matched to TCP or UDP, wireless or security terms are matched to their mechanisms, and automation items are matched to the correct API or management model. This matters operationally because troubleshooting fails quickly when a forwarding-plane function is treated as a management-plane feature or when a security control is applied to the wrong threat. The shown mapping is therefore retained as the verified response.

10.165.20.226. Cisco forwarding uses longest-prefix match first, then administrative distance and metric when multiple sources compete. Cisco CCNA 200-301 v1.1 includes this under IP Services, where the expected skill is identifying the mechanism that actually satisfies the scenario. The wording usually gives the decisive clue: a protocol number, a route prefix, a control-plane role, a wireless security method, or a management command. Wrong choices either do not match the destination prefix, point to the wrong next hop, or fail to create the required primary or backup route. In a real network, selecting the wrong option would usually produce a failed adjacency, broken client connectivity, insecure management access, or an incorrect forwarding path. The selected answer matches the Cisco behavior and configuration model required by the question, so it is retained as the verified answer for this item.

Option D. OSPF operation depends on area membership, network type, timers, router ID, priority, and whether a DR/BDR election occurs. Cisco CCNA 200-301 v1.1 includes this under IP Connectivity, where the expected skill is identifying the mechanism that actually satisfies the scenario. The wording usually gives the decisive clue: a protocol number, a route prefix, a control-plane role, a wireless security method, or a management command. Incorrect choices either use the wrong OSPF role, omit a required adjacency condition, or apply a setting that does not affect the stated behavior. In a real network, selecting the wrong option would usually produce a failed adjacency, broken client connectivity, insecure management access, or an incorrect forwarding path. The selected answer matches the Cisco behavior and configuration model required by the question, so it is retained as the verified answer for this item.

Enable LLDP globally. LLDP is the standards-based neighbor discovery protocol used in multivendor environments. Cisco Discovery Protocol is Cisco proprietary, so it is not the correct tool when the ISP uses third-party devices and Neighbor Discovery needs to work across the PE-to-ISP connection. Enabling LLDP globally allows the Cisco device to advertise and receive LLDP neighbor information, assuming the interface also permits it. Cisco CCNA 200-301 v1.1 Network Access expects engineers to know when to use CDP and when to use LLDP. Disabling autonegotiation does not solve neighbor discovery, and disabling CDP only removes Cisco proprietary discovery without replacing it. LLDP-MED is an extension mainly used for endpoint and voice-related discovery, not the basic requirement here. The necessary action is to enable LLDP globally.

Cisco CCNA 200-301 v1.1 Network Fundamentals questions of this type test whether each item is matched to the technology that actually performs that role. The reliable method is to classify each term by operating layer, packet behavior, management function, or security purpose before matching it. Several terms in these items are legitimate Cisco networking concepts, but they become wrong when assigned to the wrong protocol or plane. The mapping retained in the document follows that separation: transport behavior is matched to TCP or UDP, wireless or security terms are matched to their mechanisms, and automation items are matched to the correct API or management model. This matters operationally because troubleshooting fails quickly when a forwarding-plane function is treated as a management-plane feature or when a security control is applied to the wrong threat. The shown mapping is therefore retained as the verified response.

Authentication verifies the identity of a person accessing a network, and authorization determines what resource a user can access.. IP services must be selected by their exact operational role: addressing, translation, time, monitoring, logging, redundancy, or traffic treatment. Cisco CCNA 200-301 v1.1 includes this under Security Fundamentals, where the expected skill is identifying the mechanism that actually satisfies the scenario. The wording usually gives the decisive clue: a protocol number, a route prefix, a control-plane role, a wireless security method, or a management command. The wrong options name real services or commands, but they solve a different infrastructure problem. In a real network, selecting the wrong option would usually produce a failed adjacency, broken client connectivity, insecure management access, or an incorrect forwarding path. The selected answer matches the Cisco behavior and configuration model required by the question, so it is retained as the verified answer for this item.

password. Security fundamentals require distinguishing identity, authorization, accounting, encryption, inspection, and physical protection. Cisco CCNA 200-301 v1.1 includes this under Security Fundamentals, where the exam expects engineers to recognize the device behavior that actually produces the required outcome. The question is best solved by reading the operational clue rather than choosing a familiar acronym. The incorrect choices apply a security term in the wrong control category or protect a different part of the system. In a production network, the wrong choice would normally create an outage, leave a management or security gap, or send troubleshooting toward the wrong subsystem. The selected answer is the one that matches the control-plane, data-plane, wireless, security, services, or automation mechanism described in the question. That is why it remains the verified answer for this item.

Cisco CCNA 200-301 v1.1 Security Fundamentals questions of this type test whether each protocol, component, address type, or management concept is matched to its correct operating role. The safe method is to classify every item by function: what it does, where it operates, and what problem it solves. Several distractors are usually valid networking terms, but they belong to a different layer or a different operational workflow. The shown mapping keeps those boundaries straight and avoids assigning a feature to the wrong technology. In practice, this same skill is required when troubleshooting because confusing a management-plane function with a forwarding-plane function, or a wireless security feature with an authentication feature, leads to incorrect fixes. The mapping shown in the file is therefore retained and explained as the verified selection.

setting up IP cameras to monitor key infrastructure. Physical access control protects buildings, rooms, racks, closets, and other infrastructure locations from unauthorized physical access. IP cameras monitoring key infrastructure are a physical security control because they deter, detect, and document physical access to sensitive areas. Console passwords and enable passwords are logical access controls on network devices, not physical controls. Backing up syslog data is an operational logging practice. Cisco CCNA 200-301 v1.1 Security Fundamentals separates administrative, technical, and physical controls because network security is not limited to packet filtering. A router in a locked cabinet is safer than one exposed in a public space, and surveillance is part of enforcing that physical boundary. The correct answer is setting up IP cameras to monitor key infrastructure.

Option D. Cisco routers select forwarding paths by longest-prefix match first, then administrative distance and metric when comparable routes compete. Cisco CCNA 200-301 v1.1 includes this under IP Connectivity, where the exam expects engineers to recognize the device behavior that actually produces the required outcome. The question is best solved by reading the operational clue rather than choosing a familiar acronym. The wrong choices either do not match the destination, use the wrong next hop, or fail to provide the intended primary/backup behavior. In a production network, the wrong choice would normally create an outage, leave a management or security gap, or send troubleshooting toward the wrong subsystem. The selected answer is the one that matches the control-plane, data-plane, wireless, security, services, or automation mechanism described in the question. That is why it remains the verified answer for this item.

Change the channel-group mode on SW1 to active or passive.. Switching behavior is determined by MAC learning, VLAN membership, trunk state, port security, and EtherChannel negotiation. Cisco CCNA 200-301 v1.1 includes this under Network Access, where the expected skill is identifying the mechanism that actually satisfies the scenario. The wording usually gives the decisive clue: a protocol number, a route prefix, a control-plane role, a wireless security method, or a management command. The incorrect choices either alter the wrong interface behavior or confuse access-layer switching with routing or security services. In a real network, selecting the wrong option would usually produce a failed adjacency, broken client connectivity, insecure management access, or an incorrect forwarding path. The selected answer matches the Cisco behavior and configuration model required by the question, so it is retained as the verified answer for this item.

Answer B,C is correct: B. Enabled interfaces come up and move to the forwarding state immediately; C. Enabled interfaces never generate topology change notifications.. PortFast lets an access interface bypass the normal listening and learning delays and move directly to forwarding when the link comes up. That is valuable for end-user ports because DHCP, login scripts, and endpoint connectivity can fail or delay while classic STP converges. PortFast-enabled edge ports also do not create the same topology-change behavior expected from ordinary switch-to-switch links when end devices connect or disconnect. Cisco CCNA 200-301 v1.1 Network Access expects engineers to apply PortFast only to ports facing end hosts, not to ports that may create Layer 2 loops. The options saying the port is placed in listening state or waits 50 seconds are the opposite of PortFast behavior. The two correct benefits are immediate forwarding and avoiding unnecessary topology-change effects for edge connections.

Answer D,E is correct: D. crypto key generate rsa modulus 2048; E. transport Input ssh. Secure Shell requires RSA keys and the VTY lines must permit SSH. For current security practice, a 2048-bit RSA modulus is the better choice than 1024-bit keys. The transport input ssh command restricts remote access to SSH instead of permitting insecure Telnet. The transport input all option would still allow Telnet and fails the requirement to replace Telnet with encrypted access. Cisco CCNA 200-301 v1.1 Security Fundamentals expects engineers to combine cryptographic key generation, local/domain prerequisites, and VTY transport settings when enabling SSH. The corrected answer pair is crypto key generate rsa modulus 2048 and transport input ssh. Together, they create the cryptographic material and enforce the encrypted management protocol on the line configuration.

forwarding packets. In a controller-based network, ordinary forwarding devices still perform data-plane forwarding. The controller centralizes policy, management, and control decisions, but packets are still forwarded by the switches and routers in the infrastructure. Off-the-shelf switches do not provide the central view, do not normally make global routing policy decisions, and do not set the controller’s packet-handling policy. Cisco CCNA 200-301 v1.1 Automation and Programmability expects candidates to distinguish the data plane from the control and management planes. The corrected answer is forwarding packets. The controller tells the network what behavior is required, but the switch ASICs and interfaces continue to move frames and packets through the network. Confusing those roles is a common SDN misconception.

switchport trunk allowed vlan add 104. The keyword add appends a VLAN to the existing allowed VLAN list without replacing the current list. That is the critical detail in the prompt: the engineer must insert the new VLAN without modifying anything previously configured. A command that specifies only VLAN 104 replaces the existing allowed list with VLAN 104, which can interrupt traffic for existing VLANs. The all option allows every VLAN and changes the policy more broadly than requested. Cisco CCNA 200-301 v1.1 Network Access expects engineers to understand the operational difference between setting a trunk allowed list and adding to it. On production trunks, using the wrong command can remove active VLANs and create an outage. The safe command is switchport trunk allowed vlan add 104.

router ospf 1network 192.168.1.1 0.0.0.0 area 0interface e1/1ip address 192.168.1.1 255.255.255.252ip ospf network point-to-point. OSPF operation depends on area membership, network type, timers, router ID, priority, and whether a DR/BDR election occurs. Cisco CCNA 200-301 v1.1 includes this under IP Connectivity, where the expected skill is identifying the mechanism that actually satisfies the scenario. The wording usually gives the decisive clue: a protocol number, a route prefix, a control-plane role, a wireless security method, or a management command. Incorrect choices either use the wrong OSPF role, omit a required adjacency condition, or apply a setting that does not affect the stated behavior. In a real network, selecting the wrong option would usually produce a failed adjacency, broken client connectivity, insecure management access, or an incorrect forwarding path. The selected answer matches the Cisco behavior and configuration model required by the question, so it is retained as the verified answer for this item.

a speed conflict. The answer follows from normal Cisco device behavior and the operating clue in the scenario. Cisco CCNA 200-301 v1.1 includes this under Network Fundamentals, where the expected skill is identifying the mechanism that actually satisfies the scenario. The wording usually gives the decisive clue: a protocol number, a route prefix, a control-plane role, a wireless security method, or a management command. The other options use adjacent terms, wrong-layer behavior, or configuration that would not produce the requested result. In a real network, selecting the wrong option would usually produce a failed adjacency, broken client connectivity, insecure management access, or an incorrect forwarding path. The selected answer matches the Cisco behavior and configuration model required by the question, so it is retained as the verified answer for this item.

Option B. OSPF operation depends on area membership, network type, timers, router ID, priority, and whether a DR/BDR election occurs. Cisco CCNA 200-301 v1.1 includes this under IP Connectivity, where the expected skill is identifying the mechanism that actually satisfies the scenario. The wording usually gives the decisive clue: a protocol number, a route prefix, a control-plane role, a wireless security method, or a management command. Incorrect choices either use the wrong OSPF role, omit a required adjacency condition, or apply a setting that does not affect the stated behavior. In a real network, selecting the wrong option would usually produce a failed adjacency, broken client connectivity, insecure management access, or an incorrect forwarding path. The selected answer matches the Cisco behavior and configuration model required by the question, so it is retained as the verified answer for this item.

00-00-5E-00-01-0a. IP services must be selected by their exact operational role: addressing, translation, time, monitoring, logging, redundancy, or traffic treatment. Cisco CCNA 200-301 v1.1 includes this under IP Connectivity, where the expected skill is identifying the mechanism that actually satisfies the scenario. The wording usually gives the decisive clue: a protocol number, a route prefix, a control-plane role, a wireless security method, or a management command. The wrong options name real services or commands, but they solve a different infrastructure problem. In a real network, selecting the wrong option would usually produce a failed adjacency, broken client connectivity, insecure management access, or an incorrect forwarding path. The selected answer matches the Cisco behavior and configuration model required by the question, so it is retained as the verified answer for this item.