Cisco CCNA 200-301 Exam 2026: Certification Practice Test —
Network Fundamentals, IP Connectivity, Network Access, Security
& Automation — 190 Multiple-Choice Questions with Answers &
Detailed Rationales
Question 1
A network administrator is configuring a switch port that will connect to a Cisco IP phone
and a workstation. The administrator needs to ensure voice traffic is tagged with VLAN 100
and data traffic is untagged on VLAN 200. Which configuration should be applied?
A. Switchport mode access, access VLAN 100
B. Switchport mode trunk, native VLAN 200, voice VLAN 100
C. Switchport mode access, access VLAN 200, voice VLAN 100
D. Switchport mode trunk, native VLAN 100, voice VLAN 200
Correct Answer: C
Explanation: Access mode with voice VLAN separates untagged data (VLAN 200) from tagged
voice traffic (VLAN 100) on a single port.
Question 2
Which layer of the OSI model is responsible for establishing, managing, and terminating
sessions between applications?
A. Transport Layer
B. Session Layer
C. Presentation Layer
D. Application Layer
,Correct Answer: B
Explanation: The Session Layer (Layer 5) establishes, manages, and terminates dialogues
between applications, including session checkpointing and recovery.
Question 3
A network engineer observes that a router interface shows "up/down" status. What is the
most likely cause of this condition?
A. The interface is administratively shut down
B. The cable is disconnected or faulty
C. The IP address is misconfigured
D. The routing protocol is not enabled
Correct Answer: B
Explanation: "Up/down" indicates Layer 1 is functional but Layer 2 is not, typically caused by
disconnected or faulty cabling.
Question 4
Which subnet mask provides 62 usable host addresses?
A. 255.255.255.192
B. 255.255.255.224
C. 255.255.255.240
D. 255.255.255.248
,Correct Answer: A
Explanation: /26 (255.255.255.192) provides 64 addresses minus 2 for network and
broadcast, yielding 62 usable hosts.
Question 5
A company needs to connect two buildings 2 kilometers apart with high bandwidth and
immunity to electromagnetic interference. Which cabling solution is most appropriate?
A. Cat 6a UTP
B. Single-mode fiber
C. Multimode fiber
D. Coaxial cable
Correct Answer: B
Explanation: Single-mode fiber supports long distances (up to 100km) with high bandwidth
and complete EMI immunity for building interconnection.
Question 6
Which protocol provides loop-free Layer 2 topology by placing redundant ports in blocking
state?
A. OSPF
B. EIGRP
C. STP
, D. VTP
Correct Answer: C
Explanation: Spanning Tree Protocol (STP) prevents Layer 2 loops by blocking redundant
paths while maintaining backup connectivity.
Question 7
An administrator enters the command "switchport port-security maximum 3" on an
interface. What does this accomplish?
A. Limits MAC addresses learned to three
B. Limits VLANs allowed to three
C. Limits broadcast traffic to three per second
D. Limits ARP entries to three
Correct Answer: A
Explanation: Port security maximum restricts the number of MAC addresses that can be
learned or allowed on the interface to three.
Question 8
Which IPv6 address type is equivalent to an IPv4 private address?
A. Global unicast
B. Link-local
C. Unique local
Network Fundamentals, IP Connectivity, Network Access, Security
& Automation — 190 Multiple-Choice Questions with Answers &
Detailed Rationales
Question 1
A network administrator is configuring a switch port that will connect to a Cisco IP phone
and a workstation. The administrator needs to ensure voice traffic is tagged with VLAN 100
and data traffic is untagged on VLAN 200. Which configuration should be applied?
A. Switchport mode access, access VLAN 100
B. Switchport mode trunk, native VLAN 200, voice VLAN 100
C. Switchport mode access, access VLAN 200, voice VLAN 100
D. Switchport mode trunk, native VLAN 100, voice VLAN 200
Correct Answer: C
Explanation: Access mode with voice VLAN separates untagged data (VLAN 200) from tagged
voice traffic (VLAN 100) on a single port.
Question 2
Which layer of the OSI model is responsible for establishing, managing, and terminating
sessions between applications?
A. Transport Layer
B. Session Layer
C. Presentation Layer
D. Application Layer
,Correct Answer: B
Explanation: The Session Layer (Layer 5) establishes, manages, and terminates dialogues
between applications, including session checkpointing and recovery.
Question 3
A network engineer observes that a router interface shows "up/down" status. What is the
most likely cause of this condition?
A. The interface is administratively shut down
B. The cable is disconnected or faulty
C. The IP address is misconfigured
D. The routing protocol is not enabled
Correct Answer: B
Explanation: "Up/down" indicates Layer 1 is functional but Layer 2 is not, typically caused by
disconnected or faulty cabling.
Question 4
Which subnet mask provides 62 usable host addresses?
A. 255.255.255.192
B. 255.255.255.224
C. 255.255.255.240
D. 255.255.255.248
,Correct Answer: A
Explanation: /26 (255.255.255.192) provides 64 addresses minus 2 for network and
broadcast, yielding 62 usable hosts.
Question 5
A company needs to connect two buildings 2 kilometers apart with high bandwidth and
immunity to electromagnetic interference. Which cabling solution is most appropriate?
A. Cat 6a UTP
B. Single-mode fiber
C. Multimode fiber
D. Coaxial cable
Correct Answer: B
Explanation: Single-mode fiber supports long distances (up to 100km) with high bandwidth
and complete EMI immunity for building interconnection.
Question 6
Which protocol provides loop-free Layer 2 topology by placing redundant ports in blocking
state?
A. OSPF
B. EIGRP
C. STP
, D. VTP
Correct Answer: C
Explanation: Spanning Tree Protocol (STP) prevents Layer 2 loops by blocking redundant
paths while maintaining backup connectivity.
Question 7
An administrator enters the command "switchport port-security maximum 3" on an
interface. What does this accomplish?
A. Limits MAC addresses learned to three
B. Limits VLANs allowed to three
C. Limits broadcast traffic to three per second
D. Limits ARP entries to three
Correct Answer: A
Explanation: Port security maximum restricts the number of MAC addresses that can be
learned or allowed on the interface to three.
Question 8
Which IPv6 address type is equivalent to an IPv4 private address?
A. Global unicast
B. Link-local
C. Unique local
