Cisco CCNA
200-301
Networking Fundamentals, Routing, Switching, IP Services & Security
Exam: 200-301 | 60 Questions & Verified Answers
Domain 1: Network Fundamentals
OSI Model, Ethernet & TCP/IP
Q1. What are the seven layers of the OSI model in order from bottom to top?
A. Physical, Data Link, Network, Transport, Session, Presentation, Application
B. Application, Presentation, Session, Transport, Network, Data Link, Physical
C. Physical, Network, Data Link, Transport, Session, Presentation, Application
D. Application, Transport, Network, Data Link, Physical, Session, Presentation
Answer: A. Physical, Data Link, Network, Transport, Session, Presentation, Application
Memory aid: 'Please Do Not Throw Sausage Pizza Away' (bottom to top).
Layer 1 Physical: bits, cables, hubs. Layer 2 Data Link: frames, MAC addresses, switches.
Layer 3 Network: packets, IP addresses, routers. Layer 4 Transport: segments, TCP/UDP.
Layers 5-7: Session (connections), Presentation (encoding/encryption), Application (HTTP, FTP,
DNS).
Q2. What is the difference between a collision domain and a broadcast domain?
A. They are identical
B. Collision domain: area where frames can collide (separated by switches); broadcast domain:
area where broadcasts are received by all devices (separated by routers)
C. Routers separate collision domains; switches separate broadcast domains
D. Hubs separate broadcast domains; routers separate collision domains
Answer: B. Collision domain separated by switches; broadcast domain separated by routers
Collision domain: shared medium where only one device can transmit at a time. Each switch port =
its own collision domain.
Broadcast domain: all devices that receive a broadcast frame. Switches forward broadcasts to all
ports (same VLAN). Routers block broadcasts.
Hub: one collision domain, one broadcast domain. Switch: many collision domains, one broadcast
domain (per VLAN). Router: separates both.
Q3. Which Ethernet frame field is used by switches to make forwarding decisions?
, A. Source IP address
B. Destination MAC address
C. VLAN tag
D. Frame Check Sequence (FCS)
Answer: B. Destination MAC address
Switches operate at Layer 2 and forward frames based on the destination MAC address.
The switch checks its MAC address table (CAM table) — if the destination MAC is known, it
forwards out that port; if unknown, it floods out all ports except the incoming port.
MAC addresses: 48-bit, 6 bytes, written as six pairs of hex digits: AA:BB:CC:DD:EE:FF.
Q4. What does the 'show mac address-table' command display on a Cisco switch?
A. All configured VLANs
B. The MAC address table mapping learned MAC addresses to switch ports
C. The routing table
D. Interface statistics
Answer: B. MAC address table mapping learned MAC addresses to switch ports
The MAC address table (CAM table) shows: VLAN, MAC address, interface, and type
(dynamic/static).
Dynamic entries are learned from incoming frames and age out after 300 seconds (default).
Use 'show mac address-table dynamic' to see only dynamically learned entries.
Q5. What is the purpose of CDP (Cisco Discovery Protocol)?
A. To discover Cisco devices on the network and share device information with directly
connected neighbors
B. To route traffic between networks
C. To assign IP addresses
D. To manage VLANs
Answer: A. Discover Cisco devices and share info with directly connected neighbors
CDP is a Cisco proprietary Layer 2 protocol that shares: device type, hostname, IOS version, IP
addresses, capabilities.
Runs by default on Cisco interfaces. Useful for network discovery and troubleshooting.
LLDP (Link Layer Discovery Protocol) is the open standard equivalent — 'show lldp neighbors'.
Security concern: disable CDP on external-facing interfaces — it reveals device information.
Domain 2: Network Access
VLANs, Trunking & Wireless
Q6. What is the difference between an access port and a trunk port on a Cisco switch?
A. Access ports carry multiple VLANs; trunk ports carry one VLAN
B. Access ports carry frames for one VLAN (untagged); trunk ports carry multiple VLANs using
802.1Q tagging
C. Trunk ports are used for end devices; access ports connect switches
D. They are identical
Answer: B. Access ports = one VLAN untagged; trunk ports = multiple VLANs with 802.1Q
tags
Access port: connects end devices (PCs, phones). Assigns one VLAN. Frames are untagged.
, Trunk port: connects switches, routers, or WAPs. Carries multiple VLANs. Uses 802.1Q tagging to
identify VLAN.
Native VLAN: frames sent on the native VLAN are not tagged on a trunk — default is VLAN 1
(change for security).
Q7. What Cisco command creates VLAN 10 and names it 'SALES'?
A. vlan 10 name SALES (in global config mode)
B. switchport vlan 10 name SALES
C. interface vlan 10 name SALES
D. create vlan 10 SALES
Answer: A. vlan 10 name SALES (in global config mode)
Commands: Switch(config)# vlan 10 → Switch(config-vlan)# name SALES
Then assign to access port: interface fa0/1 → switchport mode access → switchport access vlan 10
For trunk: interface gi0/1 → switchport mode trunk → switchport trunk allowed vlan 10,20,30
Q8. What is STP (Spanning Tree Protocol) and what problem does it solve?
A. A routing protocol for IP traffic
B. A Layer 2 protocol that prevents switching loops by blocking redundant paths while keeping
them as backups
C. A protocol for assigning IP addresses
D. A wireless security protocol
Answer: B. Layer 2 protocol preventing switching loops by blocking redundant paths
Without STP, redundant switch paths create broadcast storms — frames loop endlessly, consuming
all bandwidth.
STP elects a Root Bridge (lowest Bridge ID = priority + MAC) and blocks all redundant paths.
RSTP (802.1w): faster convergence (seconds vs. 50 seconds for classic STP).
PortFast: enables immediate forwarding on access ports — bypasses STP listening/learning states.
Q9. What does the Cisco command 'show interfaces trunk' display?
A. All interfaces with their IP addresses
B. Interfaces configured as trunks with allowed VLANs, native VLAN, and active VLANs
C. The routing table for trunk connections
D. Wireless interface configurations
Answer: B. Trunk interfaces with allowed VLANs, native VLAN, and active VLANs
Output includes: interface, mode, encapsulation (802.1Q), status, native VLAN, allowed VLANs,
VLANs in STP forwarding state.
Check here when VLANs are not passing over a trunk — verify the VLAN is in the 'VLANs allowed
and active in management domain' list.
Domain 3: IP Connectivity
Routing, Subnetting & Static Routes
Q10. What are the three types of routing a router uses to populate its routing table?
A. Static, default, and floating routes
B. Directly connected routes, static routes configured by an admin, and dynamic routes learned
from routing protocols
200-301
Networking Fundamentals, Routing, Switching, IP Services & Security
Exam: 200-301 | 60 Questions & Verified Answers
Domain 1: Network Fundamentals
OSI Model, Ethernet & TCP/IP
Q1. What are the seven layers of the OSI model in order from bottom to top?
A. Physical, Data Link, Network, Transport, Session, Presentation, Application
B. Application, Presentation, Session, Transport, Network, Data Link, Physical
C. Physical, Network, Data Link, Transport, Session, Presentation, Application
D. Application, Transport, Network, Data Link, Physical, Session, Presentation
Answer: A. Physical, Data Link, Network, Transport, Session, Presentation, Application
Memory aid: 'Please Do Not Throw Sausage Pizza Away' (bottom to top).
Layer 1 Physical: bits, cables, hubs. Layer 2 Data Link: frames, MAC addresses, switches.
Layer 3 Network: packets, IP addresses, routers. Layer 4 Transport: segments, TCP/UDP.
Layers 5-7: Session (connections), Presentation (encoding/encryption), Application (HTTP, FTP,
DNS).
Q2. What is the difference between a collision domain and a broadcast domain?
A. They are identical
B. Collision domain: area where frames can collide (separated by switches); broadcast domain:
area where broadcasts are received by all devices (separated by routers)
C. Routers separate collision domains; switches separate broadcast domains
D. Hubs separate broadcast domains; routers separate collision domains
Answer: B. Collision domain separated by switches; broadcast domain separated by routers
Collision domain: shared medium where only one device can transmit at a time. Each switch port =
its own collision domain.
Broadcast domain: all devices that receive a broadcast frame. Switches forward broadcasts to all
ports (same VLAN). Routers block broadcasts.
Hub: one collision domain, one broadcast domain. Switch: many collision domains, one broadcast
domain (per VLAN). Router: separates both.
Q3. Which Ethernet frame field is used by switches to make forwarding decisions?
, A. Source IP address
B. Destination MAC address
C. VLAN tag
D. Frame Check Sequence (FCS)
Answer: B. Destination MAC address
Switches operate at Layer 2 and forward frames based on the destination MAC address.
The switch checks its MAC address table (CAM table) — if the destination MAC is known, it
forwards out that port; if unknown, it floods out all ports except the incoming port.
MAC addresses: 48-bit, 6 bytes, written as six pairs of hex digits: AA:BB:CC:DD:EE:FF.
Q4. What does the 'show mac address-table' command display on a Cisco switch?
A. All configured VLANs
B. The MAC address table mapping learned MAC addresses to switch ports
C. The routing table
D. Interface statistics
Answer: B. MAC address table mapping learned MAC addresses to switch ports
The MAC address table (CAM table) shows: VLAN, MAC address, interface, and type
(dynamic/static).
Dynamic entries are learned from incoming frames and age out after 300 seconds (default).
Use 'show mac address-table dynamic' to see only dynamically learned entries.
Q5. What is the purpose of CDP (Cisco Discovery Protocol)?
A. To discover Cisco devices on the network and share device information with directly
connected neighbors
B. To route traffic between networks
C. To assign IP addresses
D. To manage VLANs
Answer: A. Discover Cisco devices and share info with directly connected neighbors
CDP is a Cisco proprietary Layer 2 protocol that shares: device type, hostname, IOS version, IP
addresses, capabilities.
Runs by default on Cisco interfaces. Useful for network discovery and troubleshooting.
LLDP (Link Layer Discovery Protocol) is the open standard equivalent — 'show lldp neighbors'.
Security concern: disable CDP on external-facing interfaces — it reveals device information.
Domain 2: Network Access
VLANs, Trunking & Wireless
Q6. What is the difference between an access port and a trunk port on a Cisco switch?
A. Access ports carry multiple VLANs; trunk ports carry one VLAN
B. Access ports carry frames for one VLAN (untagged); trunk ports carry multiple VLANs using
802.1Q tagging
C. Trunk ports are used for end devices; access ports connect switches
D. They are identical
Answer: B. Access ports = one VLAN untagged; trunk ports = multiple VLANs with 802.1Q
tags
Access port: connects end devices (PCs, phones). Assigns one VLAN. Frames are untagged.
, Trunk port: connects switches, routers, or WAPs. Carries multiple VLANs. Uses 802.1Q tagging to
identify VLAN.
Native VLAN: frames sent on the native VLAN are not tagged on a trunk — default is VLAN 1
(change for security).
Q7. What Cisco command creates VLAN 10 and names it 'SALES'?
A. vlan 10 name SALES (in global config mode)
B. switchport vlan 10 name SALES
C. interface vlan 10 name SALES
D. create vlan 10 SALES
Answer: A. vlan 10 name SALES (in global config mode)
Commands: Switch(config)# vlan 10 → Switch(config-vlan)# name SALES
Then assign to access port: interface fa0/1 → switchport mode access → switchport access vlan 10
For trunk: interface gi0/1 → switchport mode trunk → switchport trunk allowed vlan 10,20,30
Q8. What is STP (Spanning Tree Protocol) and what problem does it solve?
A. A routing protocol for IP traffic
B. A Layer 2 protocol that prevents switching loops by blocking redundant paths while keeping
them as backups
C. A protocol for assigning IP addresses
D. A wireless security protocol
Answer: B. Layer 2 protocol preventing switching loops by blocking redundant paths
Without STP, redundant switch paths create broadcast storms — frames loop endlessly, consuming
all bandwidth.
STP elects a Root Bridge (lowest Bridge ID = priority + MAC) and blocks all redundant paths.
RSTP (802.1w): faster convergence (seconds vs. 50 seconds for classic STP).
PortFast: enables immediate forwarding on access ports — bypasses STP listening/learning states.
Q9. What does the Cisco command 'show interfaces trunk' display?
A. All interfaces with their IP addresses
B. Interfaces configured as trunks with allowed VLANs, native VLAN, and active VLANs
C. The routing table for trunk connections
D. Wireless interface configurations
Answer: B. Trunk interfaces with allowed VLANs, native VLAN, and active VLANs
Output includes: interface, mode, encapsulation (802.1Q), status, native VLAN, allowed VLANs,
VLANs in STP forwarding state.
Check here when VLANs are not passing over a trunk — verify the VLAN is in the 'VLANs allowed
and active in management domain' list.
Domain 3: IP Connectivity
Routing, Subnetting & Static Routes
Q10. What are the three types of routing a router uses to populate its routing table?
A. Static, default, and floating routes
B. Directly connected routes, static routes configured by an admin, and dynamic routes learned
from routing protocols
