Cisco CCNA (200-301) Exam Prep | 500+ Most Tested
Questions with Correct Answers & Expert Rationales
2026/2027
Question 1
Which two sublayers make up the Data Link layer (Layer 2) of the OSI
model?
A. Physical Signaling and Media Dependent Interface
B. Logical Link Control (LLC) and Media Access Control (MAC)
C. Network Control Protocol and Framing Control
D. Transmission Control and Internet Protocol
Correct Answer: B. Logical Link Control (LLC) and Media Access Control
(MAC)
Detailed Rationale: The Data Link layer is divided into two sublayers:
LLC (IEEE 802.2), which handles error checking and network layer
protocol communication, and MAC (IEEE 802.3), which handles physical
addressing and media access control.
Question 2
An engineer needs to subnet a network to support at least 50 host
devices per subnet while maximizing the number of available subnets
using a classful IPv4 address block. Which subnet mask should be
chosen?
A. 255.255.255.128 (/25)
,B. 255.255.255.192 (/26)
C. 255.255.255.224 (/27)
D. 255.255.255.240 (/28)
Correct Answer: B. 255.255.255.192 (/26)
Detailed Rationale: A /26 subnet mask leaves 6 bits for host addresses
(26 − 2 = 62 usable hosts), which accommodates the 50-host
requirement. A /27 mask only provides 30 usable hosts, which is
insufficient.
Question 3
Which IPv6 address prefix designates Unique Local Addresses (ULA),
which are intended for local communication within an organization and
are not routable on the global internet?
A. 2000::/3
B. FC00::/7
C. FE80::/10
D. FF00::/8
Correct Answer: B. FC00::/7
Detailed Rationale: Unique Local Addresses (ULAs) begin with the
prefix FC00::/7 (specifically FD00::/8 for locally assigned prefixes) and
provide IPv6 site-local addressing similar to IPv4 private RFC 1918
space.
Question 4
,Which IEEE Power over Ethernet (PoE) standard delivers up to 30 watts
of DC power over standard twisted-pair Ethernet cabling?
A. IEEE 802.3af
B. IEEE 802.3at
C. IEEE 802.3bt
D. IEEE 802.3u
Correct Answer: B. IEEE 802.3at
Detailed Rationale: IEEE 802.3at (commonly known as PoE+) provides
up to 30W of power, whereas the older 802.3af standard provides up to
15.4W. 802.3bt provides even higher power (Type 3 and Type 4).
Question 5
In the TCP three-way handshake, what is the correct sequence of
control flags exchanged between two hosts to establish a session?
A. SYN, SYN-ACK, ACK
B. ACK, SYN, FIN
C. SYN, ACK, FIN
D. REQUEST, OFFER, ACK
Correct Answer: A. SYN, SYN-ACK, ACK
Detailed Rationale: The TCP three-way handshake proceeds as follows:
the client sends a SYN packet, the server responds with a SYN-ACK
packet, and the client completes the handshake with an ACK packet.
Question 6
, In a Cisco wireless deployment, what is the primary operational
characteristic of a FlexConnect access point?
A. It requires an active CAPWAP tunnel for all client data traffic at all
times.
B. It can switch client data traffic locally to the local switch port rather
than tunneling it back to the Wireless LAN Controller (WLC) over a WAN
link.
C. It functions entirely as a standalone home router without any WLC
management.
D. It only operates in the 2.4 GHz frequency spectrum.
Correct Answer: B. It can switch client data traffic locally to the local
switch port rather than tunneling it back to the Wireless LAN Controller
(WLC) over a WAN link.
Detailed Rationale: FlexConnect is designed for branch office
deployments where WAN bandwidth to the central WLC is limited,
allowing local data switching while maintaining central management
control.
Question 7
What occurs when a switch port is configured as an access port and
receives an Ethernet frame containing an 802.1Q VLAN tag?
A. The switch port accepts the frame and forwards it to the native
VLAN.
B. The switch port drops the tagged frame because access ports expect
untagged traffic.
Questions with Correct Answers & Expert Rationales
2026/2027
Question 1
Which two sublayers make up the Data Link layer (Layer 2) of the OSI
model?
A. Physical Signaling and Media Dependent Interface
B. Logical Link Control (LLC) and Media Access Control (MAC)
C. Network Control Protocol and Framing Control
D. Transmission Control and Internet Protocol
Correct Answer: B. Logical Link Control (LLC) and Media Access Control
(MAC)
Detailed Rationale: The Data Link layer is divided into two sublayers:
LLC (IEEE 802.2), which handles error checking and network layer
protocol communication, and MAC (IEEE 802.3), which handles physical
addressing and media access control.
Question 2
An engineer needs to subnet a network to support at least 50 host
devices per subnet while maximizing the number of available subnets
using a classful IPv4 address block. Which subnet mask should be
chosen?
A. 255.255.255.128 (/25)
,B. 255.255.255.192 (/26)
C. 255.255.255.224 (/27)
D. 255.255.255.240 (/28)
Correct Answer: B. 255.255.255.192 (/26)
Detailed Rationale: A /26 subnet mask leaves 6 bits for host addresses
(26 − 2 = 62 usable hosts), which accommodates the 50-host
requirement. A /27 mask only provides 30 usable hosts, which is
insufficient.
Question 3
Which IPv6 address prefix designates Unique Local Addresses (ULA),
which are intended for local communication within an organization and
are not routable on the global internet?
A. 2000::/3
B. FC00::/7
C. FE80::/10
D. FF00::/8
Correct Answer: B. FC00::/7
Detailed Rationale: Unique Local Addresses (ULAs) begin with the
prefix FC00::/7 (specifically FD00::/8 for locally assigned prefixes) and
provide IPv6 site-local addressing similar to IPv4 private RFC 1918
space.
Question 4
,Which IEEE Power over Ethernet (PoE) standard delivers up to 30 watts
of DC power over standard twisted-pair Ethernet cabling?
A. IEEE 802.3af
B. IEEE 802.3at
C. IEEE 802.3bt
D. IEEE 802.3u
Correct Answer: B. IEEE 802.3at
Detailed Rationale: IEEE 802.3at (commonly known as PoE+) provides
up to 30W of power, whereas the older 802.3af standard provides up to
15.4W. 802.3bt provides even higher power (Type 3 and Type 4).
Question 5
In the TCP three-way handshake, what is the correct sequence of
control flags exchanged between two hosts to establish a session?
A. SYN, SYN-ACK, ACK
B. ACK, SYN, FIN
C. SYN, ACK, FIN
D. REQUEST, OFFER, ACK
Correct Answer: A. SYN, SYN-ACK, ACK
Detailed Rationale: The TCP three-way handshake proceeds as follows:
the client sends a SYN packet, the server responds with a SYN-ACK
packet, and the client completes the handshake with an ACK packet.
Question 6
, In a Cisco wireless deployment, what is the primary operational
characteristic of a FlexConnect access point?
A. It requires an active CAPWAP tunnel for all client data traffic at all
times.
B. It can switch client data traffic locally to the local switch port rather
than tunneling it back to the Wireless LAN Controller (WLC) over a WAN
link.
C. It functions entirely as a standalone home router without any WLC
management.
D. It only operates in the 2.4 GHz frequency spectrum.
Correct Answer: B. It can switch client data traffic locally to the local
switch port rather than tunneling it back to the Wireless LAN Controller
(WLC) over a WAN link.
Detailed Rationale: FlexConnect is designed for branch office
deployments where WAN bandwidth to the central WLC is limited,
allowing local data switching while maintaining central management
control.
Question 7
What occurs when a switch port is configured as an access port and
receives an Ethernet frame containing an 802.1Q VLAN tag?
A. The switch port accepts the frame and forwards it to the native
VLAN.
B. The switch port drops the tagged frame because access ports expect
untagged traffic.
