Free Cisco 200-301 Practice Exam with Questions & Answers | Set: 5

An IPv6-enabled router interface joins the all-nodes multicast group FF02::1 and the all-routers multicast group FF02::2. FF02::1 is used to reach all IPv6 nodes on the local link. FF02::2 is used to reach IPv6 routers on the local link. The interface also joins a solicited-node multicast group derived from its IPv6 address, but that specific group is not one of the answer choices. 2000::/3 represents global unicast space, FC00::/7 is unique local addressing, and 2002::/5 or similar values are not the required local multicast groups. The “FF” prefix is the key sign that the address is multicast, while the “02” scope means link-local scope. CCNA 200-301 v1.1 Network Fundamentals expects candidates to identify common IPv6 address types and multicast groups used by Neighbor Discovery and routing functions. Therefore the verified answers are D and E. Reference: Cisco IPv6 multicast addressing and IPv6 interface behavior.

ip route 10.0.3.0 255.255.255.0 10.0.4.3. Cisco forwarding uses longest-prefix match first, then administrative distance and metric when multiple sources compete. Cisco CCNA 200-301 v1.1 includes this under IP Connectivity, where the expected skill is identifying the mechanism that actually satisfies the scenario. The wording usually gives the decisive clue: a protocol number, a route prefix, a control-plane role, a wireless security method, or a management command. Wrong choices either do not match the destination prefix, point to the wrong next hop, or fail to create the required primary or backup route. In a real network, selecting the wrong option would usually produce a failed adjacency, broken client connectivity, insecure management access, or an incorrect forwarding path. The selected answer matches the Cisco behavior and configuration model required by the question, so it is retained as the verified answer for this item.

The correct response is A. A client roaming between APs on the same SSID sends a reassociation request. The frame tells the new AP that the client was previously associated elsewhere and is moving within the ESS. For Cisco CCNA 200-301 v1.1, the important point is the mechanism, not a generic description of the technology. Probe requests discover networks, authentication requests start 802.11 authentication, and association requests are used for an initial association rather than roaming reassociation. When this appears in a network, the symptom normally confirms the answer: the route installed, the state selected, the packet forwarded, the wireless client behaviour, or the management workflow will follow this rule. That is why this answer is the best fit for the scenario and not just a plausible networking term.

For voice over WLAN, the WLC QoS profile should be Platinum. Cisco wireless QoS profiles map traffic treatment to application sensitivity: Platinum is intended for voice, Gold for video, Silver for best effort, and Bronze for background traffic. Voice is extremely sensitive to delay, jitter, and packet loss, so it requires the highest WLAN QoS treatment available in the controller GUI. Selecting Silver would treat the WLAN like normal best-effort data, which is unacceptable for real-time voice. Gold is better than best effort, but Cisco positions it for video rather than voice. Bronze deliberately gives low-priority treatment to background traffic. This is an IP Services topic because QoS behavior determines how network devices classify, queue, and prioritize traffic. In a CCNA v1.1 context, do not overthink the wireless GUI wording: when the application is voice, choose the controller profile explicitly designed for voice. That profile is Platinum.

The command ip address dhcp makes a Cisco router interface act as a DHCP client. Instead of manually assigning an IPv4 address and mask to the interface, the router sends DHCP client messages and accepts an address, default gateway information, and other options from a DHCP server when available. The ip helper-address command is different: it configures DHCP relay on an interface so client broadcasts can be forwarded to a DHCP server on another subnet. The ip dhcp pool command builds a DHCP server pool on the router, and ip dhcp client is not the interface command used for this purpose. This is a typical CCNA 200-301 v1.1 IP Services distinction: client, server, and relay roles are separate. When a router must obtain its own interface address dynamically, configure ip address dhcp under the interface and ensure the interface is no shutdown. Therefore the verified answer is A. Reference: Cisco IOS DHCP client configuration guidance.

Answer D is the technically correct selection. A DNS lookup resolves a name query or reverse query by asking DNS infrastructure for the matching value. In normal client use, DNS translates a hostname into an IP address so the application can connect to the destination. This aligns with Cisco CCNA 200-301 v1.1 because the exam blueprint requires engineers to recognize operational behaviour from configuration symptoms and topology requirements. DNS does not ping the destination, act as an HA redirector by default, or merely define port 53 service behaviour. Treat the distractors carefully: most are real Cisco terms, but they solve a different problem or operate at a different layer. The selected answer is the one that would be used by an engineer on the device or in the design to produce the outcome stated in the question.

Use A for this item. In a hub-and-spoke WAN, spoke sites communicate through a central hub rather than direct spoke-to-spoke links. This structure lets the hub enforce routing, policy, inspection, and access restrictions between subscriber or branch sites. In Cisco CCNA 200-301 v1.1, Network Fundamentals questions frequently test the practical boundary between similar features: what the feature does, where it is configured, and what problem it is meant to solve. The topology does not inherently provide direct connections between every subscriber; that is closer to full mesh. A clean way to validate the answer is to map the wording of the scenario to the actual device function. If the feature supplies addressing, forwarding, authentication, trunking, route selection, or controller communication, the answer must match that function exactly rather than a nearby protocol name.

2001:db8:1a44:41a4:C081:BFFF:FE4A:1. Routing and redundancy questions are solved by applying longest-prefix match, administrative distance, metrics, and gateway-redundancy behavior in the correct order. Cisco CCNA 200-301 v1.1 includes this under Network Fundamentals, where the expected skill is selecting the feature that actually produces the requested network behavior. The wording normally gives the clue: protocol family, address scope, trunk state, route preference, security mode, API method, or controller role. Incorrect choices point to the wrong next hop, choose the wrong route source, or confuse routing with Layer 2 behavior. In production, choosing the wrong option would typically cause failed client access, a broken route, insecure management, or an automation workflow that targets the wrong interface. The selected answer is the Cisco-consistent behavior for this item.

The verified answer is A. The correct ACL option is the one that permits traffic arriving from G0/0 while denying traffic from G0/1 according to the exhibit direction. ACL placement and direction decide whether packets match at ingress or egress, so the selected list must be applied where the source interface condition is true. Cisco CCNA 200-301 v1.1 places this skill in Security Fundamentals, where the exam expects a working understanding of how the feature behaves on real Cisco networks, not just a memorized command. A list with reversed source logic or the wrong interface direction would either block valid hosts or fail to block the unwanted traffic. In production, this distinction matters because a misapplied command or design choice usually creates an outage, a security gap, or unnecessary troubleshooting noise. The correct choice matches the control-plane, data-plane, wireless, security, or services behaviour described in the scenario and should be preferred over options that merely sound related.

TKIP/MIC encryption. WPA was introduced as an interim improvement over WEP and is strongly associated with TKIP and MIC. TKIP replaced WEP’s weak key handling, and MIC added message integrity protection to detect tampering. 802.1X can be used with enterprise WLAN authentication, but it is not the most distinctive feature of WPA in this option set. Preshared keys are also supported, but the defining protocol improvement over WEP is TKIP/MIC. Cisco CCNA 200-301 v1.1 Network Access expects engineers to place WEP, WPA, WPA2, and WPA3 in the right security progression. The corrected answer is TKIP/MIC encryption. WPA2 moved the preferred encryption mechanism to AES/CCMP, while WPA3 added SAE for stronger personal authentication. Selecting 802.1X here misses the feature that specifically identifies WPA.

The exhibit shows an interface configured as trusted for Dynamic ARP Inspection. In a normal access-layer design, trusted DAI ports are not user-facing ports. They are uplinks or infrastructure-facing links where valid ARP replies may arrive, typically toward a router, distribution switch, or another trusted network device. End-user devices such as PCs and ordinary DHCP clients should stay untrusted so the switch can validate their ARP traffic against the DHCP snooping binding database. If an untrusted host sends forged ARP information, DAI can drop it before it poisons neighboring hosts. That is why the device connected to FastEthernet0/1 is expected to be a router in this scenario. Cisco CCNA 200-301 v1.1 places this under IP Services and access-layer security behavior because DHCP snooping and DAI work together to protect Layer 2 addressing. The clue is the ip arp inspection trust interface setting. A trusted port should face infrastructure, not an endpoint, so C is correct.

object. Automation and programmability questions test whether the engineer can separate data format, transport method, controller role, and API direction. REST commonly uses HTTP methods such as GET, POST, PUT, and DELETE. JSON represents structured data with objects, arrays, strings, numbers, Booleans, and null values. Northbound APIs allow applications to interact with a controller, while southbound APIs allow the controller to communicate with network devices. NETCONF and RESTCONF are configuration/management protocols, not generic forwarding behaviors. The incorrect choices often mix controller-to-device communication with application-to-controller communication or confuse a data format with a protocol. Cisco CCNA 200-301 v1.1 includes this area because modern network operations increasingly rely on APIs and centralized controllers. The selected answer matches the correct API direction, data representation, or HTTP operation for the scenario.

Answer A,B is correct: A. It groups two or more routers to operate as one virtual router.; B. It improves network availability by providing redundant gateways.. Routing and redundancy questions are solved by applying longest-prefix match, administrative distance, metrics, and gateway-redundancy behavior in the correct order. Cisco CCNA 200-301 v1.1 includes this under IP Connectivity, where the expected skill is selecting the feature that actually produces the requested network behavior. The wording normally gives the clue: protocol family, address scope, trunk state, route preference, security mode, API method, or controller role. Incorrect choices point to the wrong next hop, choose the wrong route source, or confuse routing with Layer 2 behavior. In production, choosing the wrong option would typically cause failed client access, a broken route, insecure management, or an automation workflow that targets the wrong interface. The selected answer is the Cisco-consistent behavior for this item.

key. Layer 2 switching behavior is driven by VLAN membership, MAC learning, trunk encapsulation, STP state, and EtherChannel negotiation. Cisco switches learn source MAC addresses on ingress, flood unknown unicasts within the same VLAN, and forward known unicasts only out the port associated with the destination MAC address. Trunk and EtherChannel questions must be solved on the logical interface and with the correct negotiation protocol: LACP uses active/passive, PAgP uses desirable/auto, and static mode uses on. STP and PortFast questions depend on whether the port is intended for an endpoint or part of the switched topology. The wrong choices usually apply the correct feature to the wrong port type or violate the required negotiation behavior. Cisco CCNA 200-301 v1.1 emphasizes these details because a single incorrect Layer 2 setting can create loops, VLAN leaks, or failed host connectivity. The selected answer matches Cisco switching operation.

The command that displays directly connected Cisco neighbors, their local interface, remote interface, platform, and capability information is show cdp neighbor. CDP is Cisco Discovery Protocol, a Layer 2 discovery protocol used by Cisco devices to advertise basic identity and adjacency information to directly connected neighbors. The other choices produce completely different outputs. show ip route displays the routing table. show ip interface displays Layer 3 interface status and IP-related settings. show interface gives physical and data-link interface counters, line protocol state, errors, and bandwidth details. Cisco CCNA 200-301 v1.1 includes discovery protocols under Network Access because engineers use CDP and LLDP to validate physical topology, switchport connections, voice-phone attachment, and neighbor device identity. CDP is Cisco-proprietary, while LLDP is standards-based. In this question, the exhibit is neighbor-oriented rather than routing-oriented or counter-oriented, so the correct operational command is show cdp neighbor.

The correct response is C. A firewall checks packets against security policy and, in stateful designs, connection state. It determines whether traffic is legitimate before allowing it between security zones or networks. For Cisco CCNA 200-301 v1.1, the important point is the mechanism, not a generic description of the technology. Layer 2 switches forward frames, load balancers distribute sessions, and LAN controllers manage wireless infrastructure. When this appears in a network, the symptom normally confirms the answer: the route installed, the state selected, the packet forwarded, the wireless client behaviour, or the management workflow will follow this rule. That is why this answer is the best fit for the scenario and not just a plausible networking term.

A server provides services to clients. In practical network terms, it runs applications or services that workstations request, and it can handle requests from multiple clients at the same time. Examples include web servers, file servers, DNS servers, DHCP servers, authentication servers, and application servers. A server does not have to run the same operating system as other servers to communicate; network protocols provide interoperability. It also does not achieve redundancy only through virtual clustering, and it does not have to be housed solely in a data center dedicated to one client. Cisco CCNA 200-301 v1.1 Network Fundamentals includes endpoint and server roles because engineers must understand what traffic sources and destinations exist on the network. The two correct functions are application/data service delivery and handling simultaneous client requests. That makes B and C correct.

The verified answer is C. A Layer 2 switch floods an unknown unicast frame when the destination MAC address is missing from its MAC address table. The flood is limited to ports in the same VLAN and excludes the ingress port where the frame arrived. Cisco CCNA 200-301 v1.1 places this skill in Network Access, where the exam expects a working understanding of how the feature behaves on real Cisco networks, not just a memorized command. The switch does not drop the frame immediately, send it back out the receiving port, or wait for the aging timer to expire. In production, this distinction matters because a misapplied command or design choice usually creates an outage, a security gap, or unnecessary troubleshooting noise. The correct choice matches the control-plane, data-plane, wireless, security, or services behaviour described in the scenario and should be preferred over options that merely sound related.

In a NAT translation table, the source address seen after inside-to-outside translation is the inside global address. The inside local address is the private address assigned to the internal host. The inside global address is the translated address that represents that internal host to the outside network. In the exhibit-based answer set, 172.23.104.4 is the address used as the translated source, so D is correct. This question is easy to miss if NAT terms are treated as labels instead of traffic direction. For outbound traffic, NAT changes the source from the inside local value to the inside global value. For return traffic, NAT reverses the operation and maps the destination back to the inside local host. Cisco CCNA v1.1 IP Services includes NAT concepts and configuration, so candidates must know inside local, inside global, outside local, and outside global. The tested idea is not merely public versus private; it is which translated field is used as the packet source.

Use B for this item. The spanning-tree root bridge is selected by the lowest bridge ID for the VLAN. The bridge ID combines bridge priority and MAC address, so the switch with the numerically lowest effective value becomes root for VLAN 110. In Cisco CCNA 200-301 v1.1, Network Access questions frequently test the practical boundary between similar features: what the feature does, where it is configured, and what problem it is meant to solve. Physical placement and port count do not decide the STP root; only the STP election values do. A clean way to validate the answer is to map the wording of the scenario to the actual device function. If the feature supplies addressing, forwarding, authentication, trunking, route selection, or controller communication, the answer must match that function exactly rather than a nearby protocol name.