200-301 Implementing and Administering Cisco Solutions (CCNA) exam badge

Cisco

Implementing and Administering Cisco Solutions (CCNA) (200-301) practice questions

★★★★★★ 4.8 575 reviews — aggregated from community votes by visitors who practiced this bank

Questions
220
Exam length
120 min
Updated
  • Instant feedback per question
  • Explanation for every option
  • Free, no signup

Domain coverage 6 domains

  • Network Fundamentals (20%)
  • Network Access (20%)
  • IP Connectivity (25%)
  • IP Services (10%)
  • Security Fundamentals (15%)
  • Automation and Programmability (10%)

Sample questions 22 of 220 shown

  1. Q1 Network Fundamentals
    Which OSI layer is responsible for logical addressing and routing?
    1. Layer 2 - Data Link
    2. Layer 3 - Network
    3. Layer 4 - Transport
    4. Layer 7 - Application
    Layer 3 (Network layer) handles logical addressing (IP addresses) and routing across networks. Layer 2 uses physical (MAC) addresses, Layer 4 manages end-to-end communication, and Layer 7 provides application services.
  2. Q2 Network Fundamentals
    A network engineer is troubleshooting a connectivity issue. The engineer confirms that the physical cable is connected and the link light is on, but the device cannot communicate on the network. At which OSI layer should the engineer focus next?
    1. Layer 1 — Physical
    2. Layer 2 — Data Link
    3. Layer 3 — Network
    4. Layer 7 — Application
    Physical layer (Layer 1) is confirmed working — cable connected, link light on. The next step is Layer 2 (Data Link): check MAC address table, VLAN configuration, STP state, and duplex/speed settings. The bottom-up OSI troubleshooting approach is fundamental CCNA methodology.
  3. Q3 Network Fundamentals
    Which TCP/IP model layer is responsible for ensuring reliable, end-to-end communication and includes protocols such as TCP and UDP?
    1. Network Access Layer
    2. Internet Layer
    3. Transport Layer
    4. Application Layer
    The Transport layer of the TCP/IP model is responsible for end-to-end communication. TCP provides reliable, connection-oriented delivery with flow control and error recovery, while UDP provides connectionless, best-effort delivery.
  4. Q4 Network Fundamentals
    What is the maximum cable length for a single segment of Cat 6a UTP cabling used for 10GBASE-T Ethernet?
    1. 55 meters
    2. 100 meters
    3. 150 meters
    4. 300 meters
    Cat 6a (augmented) UTP cabling supports 10GBASE-T Ethernet at distances up to 100 meters. Cat 6 (non-augmented) also supports 10GBASE-T but only up to approximately 55 meters due to higher alien crosstalk at 10 Gbps frequencies. Cat 6a was specifically designed with improved shielding to eliminate this limitation.
  5. Q5 Network Fundamentals
    Which type of fiber optic cable uses a larger core diameter (typically 50 or 62.5 microns) and is commonly used for shorter distances within a campus?
    1. Single-mode fiber (SMF)
    2. Multimode fiber (MMF)
    3. Plastic optical fiber (POF)
    4. Dispersion-shifted fiber (DSF)
    Multimode fiber (MMF) uses a larger core diameter (50 or 62.5 microns) allowing multiple light modes to propagate. It is less expensive and easier to terminate than SMF, but limited to shorter distances (up to 400-550 meters at 10 Gbps). Single-mode fiber uses a smaller core (8-10 microns) and can span tens of kilometers.
  6. Q6 Network Fundamentals
    A network technician needs to connect a switch to a router using a copper Ethernet cable. Both devices have auto-MDIX disabled. Which type of cable is required?
    1. Straight-through cable
    2. Crossover cable
    3. Rollover (console) cable
    4. Coaxial cable
    Without auto-MDIX, traditional cabling rules apply. Switches use MDIX pinout, while routers use MDI pinout. Connecting unlike pin configurations (MDI to MDIX) requires a straight-through cable. Crossover cables connect like configurations (switch-to-switch, router-to-router). With auto-MDIX enabled (default on modern Cisco switches), any cable type works.
  7. Q7 Network Fundamentals
    How are network data transmissions calculated?
    1. goodput + traffic overhead = throughput
    2. goodput + latency = bandwidth
    3. throughput + goodput = bandwidth
    4. throughput + latency = goodput
    Bandwidth is the capacity of the medium to carry data. Throughput is typically lower than bandwidth due to various factors. Goodput is the throughput minus the overhead from session establishment, acknowledgments, encapsulation, and retransmitted traffic.
  8. Q8 Network Fundamentals
    Which network topology provides the highest redundancy by connecting every device to every other device, but becomes impractical as the network scales?
    1. Star topology
    2. Bus topology
    3. Full mesh topology
    4. Ring topology
    A full mesh topology connects every device to every other device, providing maximum redundancy. However, the number of links grows exponentially with the formula n(n-1)/2, making it impractical for large networks. For example, 10 devices require 45 links, but 100 devices require 4,950 links.
  9. Q9 Network Fundamentals
    Two students are discussing routers and one statement that is said between them is accurate. Which statement is that?
    1. A directly-connected network is automatically added to the routing table of an adjacency neighbor if both routers are Cisco routers.
    2. A gateway of last resort is added to the routing table when the router boots up.
    3. Remote networks can only be added after they are learned by routers through dynamic routing protocols.
    4. A default route provides a way for packets that do not match a specific route in the routing table to be forwarded.
    A default route (gateway of last resort) provides a path for packets that do not match any specific route in the routing table. Directly connected networks are added when IP is configured on an active interface. Networks can be learned through static routes or dynamic protocols. A gateway of last resort is not automatically added at boot.
  10. Q10 Network Fundamentals
    What are two benefits of using virtualization? (Choose two.)
    1. The operating system of the virtual machine does not require licensing when it is virtualized.
    2. The virtual machine is no longer dependent on a specific hardware platform.
    3. Because all virtual operating systems are contained within a single virtual network, networking connections are simplified.
    4. The performance of a virtual machine is faster than the performance of the operating system running on physical hardware.
    5. Multiple virtual machines can be running simultaneously on a single physical device.
    Virtualization benefits include: consolidating multiple guest operating systems on a single device, reduced power consumption, faster OS recovery, and hardware platform independence. VMs still require OS licensing, networking is not necessarily simplified, and VM performance is typically not faster than bare-metal.
  11. Q11 Network Fundamentals
    A network engineer is giving a tour of the company network operations center to a college class. Which statement correctly describes network infrastructure and network communication?
    1. Communication across the internet requires application of recognized technologies and standards.
    2. LANs are used to connect WANs around the world.
    3. A LAN connects small networks to large global networks.
    4. The internet is a worldwide collection of interconnected networks owned by an organization.
    The internet is not owned by any individual or organization. Effective communication across the diverse internet infrastructure requires the application of consistent, recognized technologies and standards, along with the cooperation of numerous network administration entities.
  12. Q12 Network Fundamentals
    Students in a data networking class are reviewing materials. Which statement describes the operation of an access control method for shared network media?
    1. The controlled-based access method, used on legacy bus-topology Ethernet LANs, decided the order of each device to transmit.
    2. In the CSMA/CD method, when two devices transmit at the same time, a collision is detected and data is resent immediately.
    3. The CSMA/CA method attempts to avoid collisions by having each device informing others how long the media will be unavailable.
    4. In a contention-based multiaccess network, each node has its own time to use the medium.
    CSMA/CA does not detect collisions but avoids them by waiting before transmitting. Each transmitting device includes the time duration needed, and all other wireless devices receive this information and know how long the medium will be unavailable.
  13. Q13 Network Fundamentals
    A group of network technicians is discussing IPv6 multicast processes. What is a feature of one type of IPv6 multicast address?
    1. A solicited-node multicast address is similar to the all-routers multicast address.
    2. It can be a source or a destination address.
    3. It has the prefix fe00::/8.
    4. The all-nodes multicast group has the same effect as an IPv4 broadcast address.
    IPv6 multicast addresses can only be destination addresses, never source addresses, and have the prefix ff00::/8. The all-nodes multicast group (ff02::1) has the same effect as an IPv4 broadcast — it reaches all nodes on the local link.
  14. Q14 Network Fundamentals
    Which two 802.11 WLAN standards operate in both the 2.4 GHz and 5 GHz frequency bands? (Choose two.)
    1. 802.11g
    2. 802.11ax
    3. 802.11n
    4. 802.11b
    5. 802.11ac
    802.11n (Wi-Fi 4) and 802.11ax (Wi-Fi 6) operate in both the 2.4 GHz and 5 GHz bands. 802.11b/g operate only in 2.4 GHz, and 802.11a/ac operate only in 5 GHz.
  15. Q15 Network Fundamentals
    A network administrator is designing an IPv4 addressing scheme and requires these subnets: 1 subnet of 100 hosts, 2 subnets of 80 hosts, 2 subnets of 30 hosts, 4 subnets of 20 hosts. Which combination of subnets and masks will provide the best addressing plan?
    1. 9 subnets of 126 hosts with a 255.255.255.128 mask
    2. 3 subnets of 126 hosts with a 255.255.255.192 mask; 6 subnets of 30 hosts with a 255.255.255.240 mask
    3. 3 subnets of 126 hosts with a 255.255.255.128 mask; 6 subnets of 30 hosts with a 255.255.255.224 mask
    4. 1 subnet of 126 hosts with a 255.255.255.192 mask; 2 subnets of 80 hosts with a 255.255.255.224 mask; 6 subnets of 30 hosts with a 255.255.255.240 mask
    Subnets needing 100 and 80 hosts require 7 host bits (2^7 - 2 = 126 usable), using mask 255.255.255.128. Subnets needing 30 and 20 hosts require 5 host bits (2^5 - 2 = 30 usable), using mask 255.255.255.224. This gives the most efficient VLSM design.
  16. Q16 Network Fundamentals
    What is a characteristic of the REST API?
    1. It evolved into what became SOAP.
    2. It is the most widely used API for web services.
    3. It is used for exchanging XML structured information over HTTP or SMTP.
    4. It is considered slow, complex, and rigid.
    REST accounts for over 80% of all API types used for web services, making it the most widely used. SOAP (not REST) uses XML and is considered more complex and rigid. REST is lightweight, stateless, and typically uses JSON.
  17. Q17 Network Fundamentals
    A host has the IP address 192.168.10.70/26. What is the network address of the subnet this host belongs to?
    1. 192.168.10.0
    2. 192.168.10.32
    3. 192.168.10.64
    4. 192.168.10.128
    /26 means 255.255.255.192 — block size of 64. Subnets: .0-.63, .64-.127, .128-.191, .192-.255. Host .70 falls in the .64 subnet. Network address = 192.168.10.64, broadcast = 192.168.10.127, usable hosts = .65-.126.
  18. Q18 Network Fundamentals
    What action takes place when a frame entering a switch has a multicast destination MAC address?
    1. The switch will forward the frame out all ports except the incoming port.
    2. The switch forwards the frame out of the specified port.
    3. The switch adds a MAC address table entry mapping for the destination MAC address and the ingress port.
    4. The switch replaces the old entry and uses the more current port.
    If the destination MAC address is a broadcast or multicast address, the switch floods the frame out all ports except the receiving port. This is fundamental Layer 2 switching behavior.
  19. Q19 Network Fundamentals
    A company has been assigned the network address 192.168.100.0/24 and needs to create 6 subnets with at least 25 hosts per subnet. Which subnet mask should be used?
    1. 255.255.255.224
    2. 255.255.255.240
    3. 255.255.255.192
    4. 255.255.255.128
    To create 6 subnets, 3 bits must be borrowed from the host portion (2^3 = 8 subnets). This leaves 5 host bits, providing 2^5 - 2 = 30 usable hosts per subnet, which satisfies the requirement of at least 25 hosts. The resulting mask is /27 = 255.255.255.224.
  20. Q20 Network Fundamentals
    A frame that enters a switch fails the Frame Check Sequence. Which two interface counters are incremented? (Choose two.)
    1. input errors
    2. frame
    3. giants
    4. CRC
    5. runts
    When a frame fails the FCS check, the switch increments both the input errors counter and the CRC counter. CRC errors are a subset of input errors. This indicates that the frame was corrupted during transmission.
  21. Q21 Network Access
    What is the purpose of VLAN trunking?
    1. To increase bandwidth
    2. To carry multiple VLAN traffic over a single link
    3. To encrypt data
    4. To assign IP addresses
    VLAN trunking using 802.1Q carries traffic for multiple VLANs by tagging frames with VLAN IDs. This allows a single physical link between switches to transport traffic for all VLANs, rather than requiring a separate link per VLAN.
  22. Q22 Network Access
    What is the primary purpose of the Spanning Tree Protocol (STP) in a switched network?
    1. To provide load balancing across multiple paths
    2. To prevent Layer 2 loops by blocking redundant paths
    3. To enable communication between different VLANs
    4. To provide faster convergence than routing protocols
    STP prevents Layer 2 loops by placing redundant paths in a blocking state, creating a loop-free logical topology. Only one active path exists between any two switches, but blocked paths can transition to forwarding if the active path fails.

Answer all 220 questions with instant feedback →

Reader reviews 575 ratings

4.8 ★★★★★★ Based on 575 ratings
  • Best investment for Cisco certification prep. The question bank for 200-301 is comprehensive and mirrors the real exam perfectly.

    ★★★★★ Sarah M.

  • Bought lifetime access for the 200-301 bank and it’s been great. Still use it to brush up even after passing the cert.

    ★★★★★★ Sophie L.

  • Passed the 200-301 exam today! The scenario-based questions here were extremely similar to what I saw on the test.

    ★★★★★ Riley B.

  • Used this 200-301 prep extensively for three weeks. The progress tracking feature kept me accountable.

    ★★★★★★ Violet W.

  • Solid prep material for 200-301. The questions feel like they were written by someone who actually teaches this stuff.

    ★★★★★★ Brooklyn T.

  • I was preparing for the 200-301 exam while juggling a newborn at home. The flexibility of this platform was a lifesaver.

    ★★★★★★ Cooper D.

Log in to rate this exam and leave a review.

Frequently asked questions

What are the main differences between the older CCNA and the current v1.1 blueprint active in 2026?

The current v1.1 blueprint modernizes the curriculum by removing legacy configuration management tools (such as Chef and Puppet) and adding topics crucial to modern enterprises, such as Generative AI, Predictive AI, Machine Learning, Terraform, and advanced STP features (Root Guard, Loop Guard, BPDU Filter). The core networking domains (Routing, Switching, Subnetting) remain fundamentally critical. Our practice question bank is fully aligned with the v1.1 blueprint, ensuring you study only the topics that appear on the current exam.

How does Cisco handle exam navigation during the 200-301 test?

Cisco enforces a strict "No-Backtracking" rule. You must answer each question sequentially. Once you press "Next," your response is permanently locked in, and you cannot return to review or change any previous answers at the end of the exam. Our online mock exam simulates this exact behavior — once you submit an answer, you cannot go back, helping you practice the time management skills needed for the real test.

What is the validity period of the CCNA certificate, and how can it be renewed?

The CCNA certification is valid for exactly 3 years. To recertify, you must fulfill one of the following criteria before your expiration date: (1) Pass any current Associate-level exam (re-taking the CCNA or taking a DevNet/CyberOps Associate exam), (2) Pass any one core or concentration professional-level exam (CCNP level), or (3) Earn 30 Continuing Education (CE) credits through official Cisco learning paths or activities on Cisco U. Our PDF question bank includes a recertification FAQ section to help you plan your certification lifecycle.

What is the official retake policy if a candidate fails the exam?

If you do not pass the 200-301 exam, you must wait a minimum of 5 calendar days, starting the day after the failed attempt, before you are allowed to retake the same exam. If you pass the exam, you are prohibited from retaking the exact same exam within 180 days. Our practice questions help you identify weak domains before you sit for the real exam, reducing the likelihood of needing a retake.

How does the 200-301 mock exam simulate the real testing experience?

Our 200-301 mock exam enforces the same strict No-Backtracking rule as the real Pearson VUE test — once you submit an answer and move to the next question, you cannot return to change it. The mock exam also mirrors the real exam's mix of multiple-choice, drag-and-drop, and performance-based lab questions across all six domains, helping you build the time management skills needed to complete 100-120 questions within the 120-minute window. Detailed answer explanations after each question help you learn from mistakes immediately.

Is the 200-301 practice question bank available as a downloadable PDF?

Yes, the complete 200-301 question bank is available as a downloadable PDF that mirrors the online practice test content. The PDF is organized by domain (Network Fundamentals, Network Access, IP Connectivity, IP Services, Security Fundamentals, and Automation), making it easy to focus your offline review on specific weak areas such as OSPFv2 configurations, STP guard mechanisms, or JSON/REST API concepts. The PDF format is ideal for reviewing CLI commands and subnetting problems without needing a live internet connection.

What makes the CCNA v1.1 automation domain different from previous versions?

The v1.1 blueprint removes legacy configuration management tools (Chef and Puppet) and adds modern DevOps concepts including Terraform, Ansible, Generative AI, Predictive AI, and Machine Learning models in enterprise networking. Our practice questions for Domain 6 reflect this updated curriculum, covering REST API CRUD operations, JSON payload parsing, and Infrastructure as Code principles that are increasingly relevant for modern network automation roles. If you are preparing for the current 200-301 exam, make sure your study materials cover these v1.1 topics — our question bank is fully updated.

Free study resources

Community-verified analysis of 74 questions from real test-taker discussions — 22 deep analyses and 0 FAQs.