Home
Cisco
200-301: Cisco Certified Network Associate Exam Dumps

Free Cisco 200-301 Exam Dumps September 2026

Here you can find all the free questions related with Cisco Certified Network Associate Exam (200-301) exam. You can also find on this page links to recently updated premium files with which you can practice for actual Cisco Certified Network Associate Exam . These premium versions are provided as 200-301 exam practice tests, both as desktop software and browser based application, you can use whatever suits your style. Feel free to try the Cisco Certified Network Associate Exam premium files for free, Good luck with your Cisco Certified Network Associate Exam .

Question No: 1

MultipleChoice

Refer to the exhibit.

The New York router must be configured so that traffic to 2000::1 is sent primarily via the Atlanta site, with a secondary path via Washington that has an administrative distance of 2. Which two commands must be configured on the New York router? (Choose two.)

Options

Aipv6 route 2000::1/128 2012::1

Bipv6 route 2000::1/128 2023::2 5

Cipv6 route 2000::1/128 2012::1 5

Dipv6 route 2000::1/128 2023::3 2

Eipv6 route 2000::1/128 2012::2

Answer
D, E

Question No: 2

MultipleChoice

Refer to the exhibit.

Refer to the exhibit. OSPF neighbors routers A, B, C, and D are sending a route for 10.227.150.160/27. When the current route for 10.227.150.160/27 becomes unavailable, which cost will router Y use to route traffic to 10.227.150.160/27?

Options

Acost 20

Bcost 30

Ccost 40

Dcost 50

Answer
C

Question No: 3

MultipleChoice

Refer to the exhibit.

Switch AccSw2 has just been added to the network along with PC2. All VLANs have been implemented on AccSw2. How must the ports on AccSw2 be configured to establish Layer 2 connectivity between PC1 and PC2?

Options

AOption A

BOption B

COption C

DOption D

Answer
A

Question No: 4

MultipleChoice

A network engineer is replacing the switches that belong to a managed-services client with new Cisco Catalyst switches. The new switches will be configured for updated security standards, including replacing Telnet services with encrypted connections and doubling the modulus size from 1024. Which two commands must the engineer configure on the new switches? (Choose two.)

Options

Acrypto key generate rsa general-keys modulus 1024

Btransport input all

Ccrypto key generate rsa usage-keys

Dcrypto key generate rsa modulus 2048

Etransport Input ssh

Answer
A, E

Question No: 5

MultipleChoice

Which default condition must be considered when an encrypted mobility tunnel is used between two Cisco WLCs?

Options

ATCP port 443 and UDP 21 are used.

BControl and data traffic encryption are enabled.

CThe tunnel uses the IPsec protocol for encapsulation.

DThe tunnel uses the EolP protocol to transmit data traffic.

Answer
A

Question No: 6

MultipleChoice

Which access point mode relies on a centralized controller for management, roaming, and SSID configuration?

Options

Arepeater mode

Bautonomous mode

Cbridge mode

Dlightweight mode

Answer
D

Question No: 7

MultipleChoice

What is a link-local all-nodes IPv6 multicast address?

Options

Aff02:0:0:0:0:0:0:1

B2004:31c:73d9:683e:255::

Cfffe:034:0dd:45d6:789e::

Dfe80:4433:034:0dd::2

Answer
D

Question No: 8

MultipleChoice

Which AP feature provides a captive portal for users to authenticate, register, and accept terms before accessing the internet?

Options

AWhole Home

BHotspot

COne-Click

DEnhanced Bluetooth

Answer
B

Question No: 9

MultipleChoice

SIMULATION

In which way does generative AI aid network simulations?

Options

AAnswer: It creates synthetic network configurations.

BAnswer: It computes optimal data storage solutions.

CAnswer: It produces a greenfield network design.

Answer
B

Question No: 10

MultipleChoice

A port security violation has occurred on a switch port due to the maximum MAC address count being exceeded. Which command must be configured to increment the security-violation count and forward an SNMP trap?

Options

Aswitchport port-security violation access

Bswitchport port-security violation protect

Cswitchport port-security violation restrict

Dswitchport port-security violation shutdown

Answer
CExplanation

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst4500/12-2/25ew/configuration/guide/conf/port_sec.html

Question No: 11

MultipleChoice

An organization developed new security policies and decided to print the policies and distribute them to all personnel so that employees review and apply the policies. Which element of a security program is the organization implementing?

Options

AAsset identification

BUser training

CPhysical access control

DVulnerability control

Answer
B

Question No: 12

MultipleChoice

SIMULATION

IP connectivity and OSPF are preconfigured on all devices where necessary. Do not make any changes to the IP addressing or OSPF. The company policy uses connected interfaces and next hops when configuring static routes except for load balancing or redundancy without floating static. Connectivity must be established between subnet 172.20.20.128/25 on the Internet and the LAN at 192.168.0.0/24 connected to SW1:

1. Configure reachability to the switch SW1 LAN subnet in router R2.

2. Configure default reachability to the Internet subnet in router R1.

3. Configure a single static route in router R2 to reach to the Internet subnet considering both redundant links between routers R1 and R2. A default route is NOT allowed in router R2.

4. Configure a static route in router R1 toward the switch SW1 LAN subnet where the primary link must be through Ethernet0/1. and the backup link must be through Ethernet0/2 using a floating route. Use the minimal administrative distance value when required.

Options

ASee the Explanation below

Answer
AExplanation

Answer as below configuration:

On R2:

Enable

Conf t

Ip route 192.168.1.0 255.255.255.0 10.10.31.1

On R1:

Enable

Conf t

Ip route 0.0.0.0 0.0.0.0 10.10.13.3

On R2

Ip route 172.20.20.128 255.255.255.128 e0/2

Ip route 172.20.20.128 255.255.255.128 e0/1

On R1

Ip route 192.168.0.0 255.255.255.0 e0/1

Ip route 192.168.0.0 255.255.255.0 10.10.12.2 3

Save all configurations after every router from anyone of these command

Do wr

Copy run start

Question No: 13

MultipleChoice

Refer to the exhibit.

Refer to the exhibit. A packet sourced from 10.10.10.32 is destined tot the Internet. What is the administrative distance for the destination route?

Options

D32

Answer
B

Question No: 14

MultipleChoice

Physical connectivity is implemented between the two Layer 2 switches, and the network connectivity between them must be configured

1. Configure an LACP EtherChannel and number it as 1; configure it between switches SW1 and SVV2 using interfaces Ethernet0/0 and Ethernet0/1 on both sides. The LACP mode must match on both ends

2 Configure the EtherChannel as a trunk link.

3. Configure the trunk link with 802.1 q tags.

4. Configure the native VLAN of the EtherChannel as VLAN 15.

Options

ASee the Explanation below

Answer
AExplanation

Answer as below configuration:

On SW1:

conf terminal

vlan 15

exit

interface range eth0/0 - 1

channel-group 1 mode active

exit

interface port-channel 1

switchport trunk encapsulation dot1q

switchport mode trunk

switchport trunk native vlan 15

end

copy run start

on SW2:

conf terminal

vlan 15

exit

interface range eth0/0 - 1

channel-group 1 mode active

exit

interface port-channel 1

switchport trunk encapsulation dot1q

switchport mode trunk

switchport trunk native vlan 15

end

copy run start

Question No: 15

MultipleChoice

Configure IPv4 and IPv6 connectivity between two routers. For IPv4, use a /28 network from the 192.168.1.0/24 private range. For IPv6, use the first /64 subnet from the 2001:0db8:aaaa::/48 subnet.

1. Using Ethernet0/1 on routers R1 and R2, configure the next usable/28 from the 192.168.1.0/24 range. The network 192.168.1.0/28 is unavailable.

2. For the IPv4 /28 subnet, router R1 must be configured with the first usable host address.

3. For the IPv4 /28 subnet, router R2 must be configured with the last usable host address.

4. For the IPv6 /64 subnet, configure the routers with the IP addressing provided from the topology.

5. A ping must work between the routers on the IPv4 and IPv6 address ranges.

Options

ASee the Explanation below

Answer
AExplanation

Answer as below configuration:

on R1

config terminal

ipv6 unicast-routing

inter eth0/1

ip addre 192.168.1.1 255.255.255.240

ipv6 addre 2001:db8:aaaa::1/64

not shut

end

copy running start

on R2

config terminal

ipv6 unicast-routing

inter eth0/1

ip address 192.168.1.14 255.255.255.240

ipv6 address 2001:db8:aaaa::2/64

not shut

end

copy running start

---------------------

for test from R1

ping ipv6 2001:db8:aaaa::1

for test from R2

ping ipv6 2001:db8:aaaa::2

Question No: 16

MultipleChoice

Connectivity between four routers has been established. IP connectivity must be configured in the order presented to complete the implementation. No dynamic routing protocols are included.

1. Configure static routing using host routes to establish connectivity from router R3 to the router R1 Loopback address using the source IP of 209.165.200.230.

2. Configure an IPv4 default route on router R2 destined for router R4.

3. Configure an IPv6 default router on router R2 destined for router R4.

Options

ASee the Explanation below

Answer
AExplanation

Answer as below configuration:

1.- on R3

config terminal

ip route 192.168.1.1 255.255.255.255 209.165.200.229

end

copy running start

2.- on R2

config terminal

ip route 0.0.0.0 0.0.0.0 209.165.202.130

end

copy running start

3.- on R2

config terminal

ipv6 route ::/0 2001:db8:abcd::2

end

copy running start

Question No: 17

MultipleChoice

Refer to the exhibit.

IP connectivity between the three routers is configured. OSPF adjacencies must be established.

1. Configure R1 and R2 Router IDs using the interface IP addresses from the link that is shared between them.

2. Configure the R2 links with a max value facing R1 and R3. R2 must become the DR. R1 and R3 links facing R2 must remain with the default OSPF configuration for DR election. Verify the configuration after clearing the OSPF process.

3. Using a host wildcard mask, configure all three routers to advertise their respective Loopback1 networks.

4. Configure the link between R1 and R3 to disable their ability to add other OSPF routers.

Options

ASee the Explanation below

Answer
AExplanation

Answer as below configuration:

on R1

conf terminal

interface Loopback0

ip address 10.10.1.1 255.255.255.255

interface Loopback1

ip address 192.168.1.1 255.255.255.0

interface Ethernet0/0

no shut

ip address 10.10.12.1 255.255.255.0

ip ospf 1 area 0

duplex auto

interface Ethernet0/1

no shut

ip address 10.10.13.1 255.255.255.0

ip ospf 1 area 0

duplex auto

router ospf 1

router-id 10.10.12.1

network 10.10.1.1 0.0.0.0 area 0

network 192.168.1.0 0.0.0.255 area 0

copy run star

---------------------------------------

On R2

conf terminal

interface Loopback0

ip address 10.10.2.2 255.255.255.255

interface Loopback1

ip address 192.168.2.2 255.255.255.0

interface Ethernet0/0

no shut

ip address 10.10.12.2 255.255.255.0

ip ospf priority 255

ip ospf 1 area 0

duplex auto

interface Ethernet0/2

no shut

ip address 10.10.23.2 255.255.255.0

ip ospf priority 255

ip ospf 1 area 0

duplex auto

router ospf 1

network 10.10.2.2 0.0.0.0 area 0

network 192.168.2.0 0.0.0.255 area 0

copy runs start

-----------------------

On R3

conf ter

interface Loopback0

ip address 10.10.3.3 255.255.255.255

interface Loopback1

ip address 192.168.3.3 255.255.255.0

interface Ethernet0/1

no shut

ip address 10.10.13.3 255.255.255.0

ip ospf 1 area 0

duplex auto

interface Ethernet0/2

no shut

ip address 10.10.23.3 255.255.255.0

ip ospf 1 area 0

duplex auto

router ospf 1

network 10.10.3.3 0.0.0.0 area 0

network 192.168.3.0 0.0.0.255 area 0

copy run start

Question No: 18

MultipleChoice

Refer to exhibit.

Three switches must be configured for Layer 2 connectivity. The company requires only the designated VLANs to be configured on their respective switches and permitted accross any links between switches for security purposes. Do not modify or delete VTP configurations.

The network needs two user-defined VLANs configured:

VLAN 110: MARKETING

VLAN 210: FINANCE

1. Configure the VLANs on the designated switches and assign them as access ports to the interfaces connected to the PCs.

2. Configure the e0/2 interfaces on Sw1 and Sw2 as 802.1q trunks with only the required VLANs permitted.

3. Configure the e0/3 interfaces on Sw2 and Sw3 as 802.1q trunks with only the required VLANs permitted.

Options

ASee the Explanation below

Answer
AExplanation

Answer as below configuration:

Sw1

enbale

config t

Vlan 210

Name FINANCE

Inter e0/1

Switchport access vlan 210

do wr

Sw2

Enable

config t

Vlan 110

Name MARKITING

Int e0/1

Switchport acees vlan 110

do wr

Sw3

Enable

config t

Vlan 110

Name MARKITING

Vlan 210

Name FINANCE

Int e0/0

Switchport access vlan 110

Int e0/1

Switchport access vlan 210

Sw1

Int e0/1

Switchport allowed vlan 210

Sw2

Int e0/2

Switchport trunk allowed vlan 210

Sw3

Int e0/3

Switchport trunk allowed vlan 210

Switchport trunk allowed vlan 210,110

Question No: 19

MultipleChoice

Refer to the exhibit.

Connectivity between four routers has been established. IP connectivity must be configured in the order presented to complete the implementation. No dynamic routing protocols are included.

1. Configure static routing using host routes to establish connectivity from router R3 to the router R1 Loopback address using the source IP of 209.165.200.230.

2. Configure an IPv4 default route on router R2 destined for router R4.

3. Configure an IPv6 default router on router R2 destined for router R4.

Options

ASee the Explanation below

Answer
AExplanation

Answer as below configuration:

1.- on R3

config terminal

ip route 192.168.1.1 255.255.255.255 209.165.200.229

end

copy running start

2.- on R2

config terminal

ip route 0.0.0.0 0.0.0.0 209.165.202.130

end

copy running start

3.- on R2

config terminal

ipv6 route ::/0 2001:db8:abcd::2

end

copy running start

Question No: 20

MultipleChoice

Refer to the exhibit.

Configure IPv4 and IPv6 connectivity between two routers. For IPv4, use a /28 network from the 192.168.1.0/24 private range. For IPv6, use the first /64 subnet from the 2001:0db8:aaaa::/48 subnet.

1. Using Ethernet0/1 on routers R1 and R2, configure the next usable/28 from the 192.168.1.0/24 range. The network 192.168.1.0/28 is unavailable.

2. For the IPv4 /28 subnet, router R1 must be configured with the first usable host address.

3. For the IPv4 /28 subnet, router R2 must be configured with the last usable host address.

4. For the IPv6 /64 subnet, configure the routers with the IP addressing provided from the topology.

5. A ping must work between the routers on the IPv4 and IPv6 address ranges.

Options

ASee the Explanation below

Answer
AExplanation

Answer as below configuration:

on R1

config terminal

ipv6 unicast-routing

inter eth0/1

ip addre 192.168.1.1 255.255.255.240

ipv6 addre 2001:db8:aaaa::1/64

not shut

end

copy running start

on R2

config terminal

ipv6 unicast-routing

inter eth0/1

ip address 192.168.1.14 255.255.255.240

ipv6 address 2001:db8:aaaa::2/64

not shut

end

copy running start

---------------------

for test from R1

ping ipv6 2001:db8:aaaa::1

for test from R2

ping ipv6 2001:db8:aaaa::2

Limited Time Offer

25%

Off

Get Premium 200-301 Questions as Interactive Web-Based Practice Test or PDF