Free Cisco 200-301 Practice Exam with Questions & Answers | Set: 6

Internet-bound traffic normally uses the default route when no more specific route matches the destination. In an IPv4 routing table, the default route is 0.0.0.0/0. The /0 prefix means it matches every IPv4 destination, but only after the router fails to find a more specific match. That matters: routers do not simply use the default route first. They perform longest-prefix matching, so connected, static, OSPF, EIGRP, or other learned specific routes win before 0.0.0.0/0 is considered. Cisco CCNA 200-301 v1.1 IP Connectivity expects engineers to distinguish host routes, network routes, floating static routes, and default routes. Here, the wording asks which path is used for Internet traffic, not traffic to a listed internal subnet. The available answer that represents a catch-all Internet path is 0.0.0.0/0. The other prefixes are specific networks and cannot represent all unknown destinations. Therefore, C is the correct choice.

Answer D and E is the technically correct selection. Cisco WLC service-port management supports Telnet and SSH access. The service port is an out-of-band management interface and can be used for direct management connectivity depending on platform configuration. This aligns with Cisco CCNA 200-301 v1.1 because the exam blueprint requires engineers to recognize operational behaviour from configuration symptoms and topology requirements. RADIUS and TACACS+ are AAA protocols, and SCP is file transfer, not the pair of management access protocols asked here. Treat the distractors carefully: most are real Cisco terms, but they solve a different problem or operate at a different layer. The selected answer is the one that would be used by an engineer on the device or in the design to produce the outcome stated in the question.

PortFast is used on access ports that connect to end devices, not to other switches. Its practical effect is to reduce spanning-tree convergence delay for those edge ports. In normal 802.1D behavior, a port may pass through blocking, listening, and learning before it forwards frames. PortFast bypasses the listening and learning delay for a trusted edge connection and allows the port to enter forwarding quickly when the link comes up. Cisco CCNA 200-301 v1.1 places this under Network Access because it is a switching feature that directly affects host connectivity. The wording in the answer choices matters: PortFast does not enable BPDUs, and it does not put the port into the listening state. It also should not be treated as a loop-prevention feature by itself; if a switch is accidentally connected to a PortFast port, BPDU Guard is normally paired with it. The clean exam answer is that PortFast minimizes spanning-tree convergence time for access-facing ports.

A router installs the best route by applying two major rules: longest prefix match and administrative distance. Prefix length is considered first when routes describe different destination scopes; the more specific prefix wins for destinations inside that range. When routes have the same prefix length but come from different routing sources, the route with the lower administrative distance is preferred. In the answer set, the OSPF route to 10.0.0.0/30 is chosen over competing routes to the same /30 because OSPF has a better administrative distance than RIP and iBGP. The EIGRP host route to 10.0.0.1/32 is also installed because it is a more specific route to that single host. Cisco CCNA 200-301 v1.1 IP Connectivity requires engineers to interpret routing tables using these exact rules. The OSPF /16 is broader and does not replace a more specific /30 for matching destinations. The route table can contain both a network route and a host route when their prefixes differ.

The verified answer is A. WPA2 with AES is the strongest encryption combination in the listed options. AES/CCMP replaced older WEP, RC4, and TKIP-based approaches and is the expected secure WPA2 cipher choice. Cisco CCNA 200-301 v1.1 places this skill in Security Fundamentals, where the exam expects a working understanding of how the feature behaves on real Cisco networks, not just a memorized command. WEP and TKIP are deprecated, and WPA with AES is not the preferred WPA2 security combination. In production, this distinction matters because a misapplied command or design choice usually creates an outage, a security gap, or unnecessary troubleshooting noise. The correct choice matches the control-plane, data-plane, wireless, security, or services behaviour described in the scenario and should be preferred over options that merely sound related.

A notice-level syslog message is severity level 5. It reports normal but significant conditions, such as operational state changes that an engineer should know about even when the device is not in a critical failure state. An interface line changing status is a standard example of a significant network event: it can affect reachability, routing adjacencies, and user traffic, but it is not necessarily a severity 0 emergency or severity 1 alert. Cisco CCNA 200-301 v1.1 includes syslog under IP Services because engineers must understand logging destinations and severity levels. A TCP connection teardown or ICMP connection being built is not the typical Cisco device notice-level management event tested here. A certificate expiration may be security-related and can be logged at various severities depending on platform and feature. The simple exam mapping is that notice means noteworthy state change. An interface line status change fits that definition, so C is the best answer.

For a small office/home office, broadband cable is the most realistic WAN access technology in the answer set. SOHO designs prioritize cost, availability, ease of installation, and adequate Internet access for a small number of users. Broadband cable and similar consumer or business broadband services fit that model. Frame Relay and ISDN are legacy WAN technologies and are not preferred for a modern SOHO architecture. A dedicated leased line can work, but it is expensive and excessive for most small office requirements. Cisco CCNA 200-301 v1.1 includes SOHO, WAN, and cloud/on-premises topology recognition under Network Fundamentals. The exam is testing design fit, not theoretical maximum control. Broadband access gives the site shared Internet connectivity without the cost and provisioning burden of carrier private circuits. The preferred WAN access technology for this use case is broadband cable access.

Routers choose the route with the longest matching prefix before comparing protocol preference for equally specific routes. If the RIP entry contains the longest prefix that includes destination 192.168.12.16, that route is selected even though RIP has a worse administrative distance than OSPF or EIGRP. Administrative distance only becomes the deciding factor when competing routes describe the same prefix length. Cisco CCNA 200-301 v1.1 IP Connectivity repeatedly tests this rule because it is fundamental to forwarding decisions. The router does not load-balance among routes simply because multiple protocols know related networks. It also does not choose EIGRP solely because EIGRP has a lower administrative distance when another route is more specific. The forwarding lookup starts with the destination IP address and finds the most specific matching prefix in the routing table. In this exhibit, the RIP route is the longest prefix inclusive of 192.168.12.16, so A describes the router behavior correctly.

To make a switch always win the STP root election for VLAN 750, configure the lowest possible bridge priority for that VLAN. Cisco STP priorities are configured in increments of 4096, and priority 0 is the lowest configurable value. The command spanning-tree vlan 750 root primary is convenient, but it calculates a priority intended to beat the current root at the time the command is entered. It is not as absolute as setting priority 0. Several listed numeric values are invalid or too high to guarantee root status. Cisco CCNA 200-301 v1.1 Network Access tests this because root bridge placement is a core switching design control. A switch becomes root by having the lowest bridge ID, and priority is compared before MAC address. Setting the VLAN priority to 0 gives the switch the strongest possible election position for VLAN 750. The command that best guarantees root status is spanning-tree vlan 750 priority 0.

A Wireless LAN Controller manages lightweight access points by exchanging control traffic with them. Older Cisco controller deployments used LWAPP, while modern deployments use CAPWAP, but the intent of the answer is the controller-to-lightweight-AP communication function. The WLC is not an AP itself and does not register with a single AP that controls the network. SSIDs identify WLANs for clients, but simply using SSIDs is not the defining WLC function. Monitoring wired LAN activity is not the best description either. Cisco CCNA 200-301 v1.1 Network Access expects candidates to understand the controller-based wireless model: lightweight APs depend on the controller for centralized management, configuration, and policy. The controller sends and receives control-plane messages with APs so wireless services can be coordinated at scale. Within the available choices, sending LWAPP packets to access points is the function that identifies a WLC.

The correct response is B. VRRP provides default-gateway redundancy on a LAN by allowing multiple routers to share a virtual gateway. Hosts use the virtual IP address as their default gateway while one router acts as master and another can take over during failure. For Cisco CCNA 200-301 v1.1, the important point is the mechanism, not a generic description of the technology. VRRP does not exchange routing tables, stop Layer 2 loops, or provide generic load balancing to distant destinations. When this appears in a network, the symptom normally confirms the answer: the route installed, the state selected, the packet forwarded, the wireless client behaviour, or the management workflow will follow this rule. That is why this answer is the best fit for the scenario and not just a plausible networking term.

A Cisco Wireless LAN Controller centralizes access point management, which is the operational benefit described in option D. In a controller-based WLAN, lightweight APs join the WLC, download configuration, receive policy, and tunnel or switch client traffic according to the deployment model. That removes the need to configure every AP independently, which is exactly the pain point a WLC is designed to solve in enterprise wireless. Option A is backwards because central management normally reduces repeated per-AP configuration. Option B is false because multiple WLANs can use similar authentication methods while still using different SSIDs and policies. Option C is not the best answer because WLCs manage lightweight APs; autonomous APs are independently configured and do not rely on the same controller model. CCNA 200-301 v1.1 Network Access expects candidates to understand controller-based wireless architecture and the role of APs versus WLCs. Reference: Cisco wireless controller and lightweight AP deployment documentation.

The failure is caused by a native VLAN mismatch. On an 802.1Q trunk, traffic for the native VLAN is sent untagged by default. Both ends of the trunk must agree on which VLAN is native; otherwise, an untagged frame sent by one switch is placed into a different VLAN when it arrives on the other switch. That silently breaks traffic separation and can also create confusing reachability failures. Cisco switching guidance treats native VLAN consistency as a basic trunk requirement, and Cisco CCNA 200-301 v1.1 tests it as part of VLAN and trunk operation. Access-mode ports would be a different problem, but the exhibit points to a trunk inconsistency. The allowed VLAN list is also not the issue if the required VLANs are already carried. The fix is to configure the same native VLAN on both sides of the trunk, normally with switchport trunk native vlan < vlan-id > . The key clue is the mismatch between Switch 1 and Switch 2 native VLAN values.

DHCP dynamically leases IP configuration to clients, and the server can exclude specific addresses from the assignable pool. Exclusions are important because some addresses in the subnet may be reserved for routers, servers, printers, infrastructure interfaces, or static assignments. DHCP leasing means the client receives an address for a defined lease time and must renew it before expiration. Cisco CCNA 200-301 v1.1 IP Services includes DHCP because engineers must understand address pools, default-router options, DNS options, exclusions, and relay behavior. The server, not the client, maintains the pool of assignable addresses. DHCP does not assign addresses forever without renewal. A client can receive DNS server information, but the statement that it can request up to four DNS servers is not the core tested role here. The two correct operational roles are that the DHCP server can exclude addresses from a pool and lease client IP addresses dynamically. Those are A and D.

A northbound API lets applications communicate with the controller. In controller-based networking, the controller sits between applications and the network devices. Applications use northbound APIs to request services, retrieve information, or express intent. The controller then translates those requests into device-level actions through southbound communication. This is the direction model CCNA candidates must keep straight: northbound faces applications and orchestration systems; southbound faces routers, switches, access points, and other infrastructure. A northbound API does not directly communicate with physical hardware, and it is not primarily a mechanism for raw device error reporting. It can expose statistics, but that is not its defining purpose. Cisco CCNA 200-301 v1.1 covers northbound and southbound APIs under Automation and Programmability because modern network operations increasingly use controllers and REST-style interfaces. The answer that precisely describes the northbound role is D: it facilitates communication between the controller and the applications.

The requirement is to block SSH management access from PC-1 to any RTR-1 interface while allowing other traffic. Applying the control to the VTY lines targets management sessions to the router itself. That is cleaner than placing an interface ACL on only one routed interface, because the question says any RTR-1 interface. SSH uses TCP port 22, so the deny statement must match tcp host 172.16.1.33 any eq 22, followed by permit ip any any to avoid an implicit deny blocking everyone else. Telnet would use TCP port 23, so options that deny port 23 do not satisfy an SSH requirement. Cisco CCNA 200-301 v1.1 Security Fundamentals expects candidates to know the difference between filtering transit traffic on interfaces and restricting administrative access through VTY lines. The correct design is an ACL that denies PC-1 SSH to any router address and then permits other traffic, applied inbound to the VTY access path. That matches option B.

In controller-based networking, the southbound API is the interface between the controller and the network devices it manages. The controller uses southbound communication to discover devices, collect operational data, push configuration, and influence forwarding behavior. Cisco CCNA 200-301 v1.1 separates this from northbound APIs, which are used by applications, orchestration tools, or business systems to communicate with the controller. The answer cannot be overlay or underlay because those terms describe logical and physical network transport designs, not API direction. Northbound is also wrong because it faces upward toward applications, not downward toward routers, switches, and access points. Common southbound technologies include NETCONF, RESTCONF, gNMI, and in SDN discussions, OpenFlow. The safest exam model is directional: northbound equals application-to-controller, while southbound equals controller-to-device. Since edge devices are the managed infrastructure, the API used to interact with them is southbound.

Use B for this item. A SOHO network commonly lets multiple users share one broadband Internet connection. Small office/home office designs emphasize low cost, simple management, wireless and wired access, and Internet edge services in a compact topology. In Cisco CCNA 200-301 v1.1, Network Fundamentals questions frequently test the practical boundary between similar features: what the feature does, where it is configured, and what problem it is meant to solve. Full-mesh switching, thousand-user capacity, and three-tier redundancy describe larger enterprise designs. A clean way to validate the answer is to map the wording of the scenario to the actual device function. If the feature supplies addressing, forwarding, authentication, trunking, route selection, or controller communication, the answer must match that function exactly rather than a nearby protocol name.

Spanning Tree elects the root bridge by comparing bridge IDs. The bridge ID is made from the bridge priority, the extended system ID, and the switch MAC address. The lowest bridge ID wins. If one switch has a lower priority than the others, it becomes root regardless of MAC address. If priorities are equal, the lowest MAC address breaks the tie. In this exhibit, SW3 has the best root-bridge election value, so it becomes the root bridge. Cisco CCNA 200-301 v1.1 Network Access expects engineers to be comfortable reading STP election data because the root placement affects forwarding paths and blocked ports. The decision is not based on physical position in the diagram, interface speed alone, or switch name. It is a deterministic comparison of STP identifiers. Once the root bridge is elected, every nonroot switch selects its root port based on lowest path cost toward that root. The elected root for this configuration is SW3.

Answer the displayed drag-and-drop mapping is the technically correct selection. DHCP snooping builds a trusted binding table from legitimate DHCP exchanges. Trusted ports face valid DHCP servers, untrusted ports face clients, and the binding database becomes the source of truth for features such as Dynamic ARP Inspection and IP Source Guard. This aligns with Cisco CCNA 200-301 v1.1 because the exam blueprint requires engineers to recognize operational behaviour from configuration symptoms and topology requirements. Ordinary MAC learning does not validate DHCP messages, and trunking or STP alone cannot prevent a rogue DHCP server from handing out false gateways. Treat the distractors carefully: most are real Cisco terms, but they solve a different problem or operate at a different layer. The selected answer is the one that would be used by an engineer on the device or in the design to produce the outcome stated in the question.