Free Cisco 200-301 Practice Questions 2026 | Cisco Certified Network Associate

What is the primary effect of the spanning-tree portfast command?

A. it enables BPDU messages

B. It minimizes spanning-tree convergence time

C. It immediately puts the port into the forwarding state when the switch is reloaded

D. It immediately enables the port in the listening state

Refer to the exhibit.

A. Option

B. Option

C. Option

D. Option

When a site-to-site VPN is configured, which IPsec mode provides encapsulation and encryption of the entire original P packet?

A. IPsec tunnel mode with AH

B. IPsec transport mode with AH

C. IPsec tunnel mode with ESP

D. IPsec transport mode with ESP

An engineer is configuring an encrypted password for the enable command on a router where the local user database has already been configured Drag and drop the configuration commands from the left into the correct sequence on the right Not all commands are used

Which statement identifies the functionality of virtual machines?

A. Virtualized servers run most efficiently when they are physically connected to a switch that is separate from the hypervisor

B. The hypervisor can virtualize physical components including CPU. memory, and storage

C. Each hypervisor can support a single virtual machine and a single software switch

D. The hypervisor communicates on Layer 3 without the need for additional resources

How do TCP and UDP differ in the way that they establish a connection between two endpoints?

A. TCP uses synchronization packets, and UDP uses acknowledgment packets.

B. UDP uses SYN, SYN ACK and FIN bits in the frame header while TCP uses SYN, SYN ACK and ACK bits

C. UDP provides reliable message transfer and TCP is a connectionless protocol

D. TCP uses the three-way handshake and UDP does not guarantee message delivery-

Drag and drop the functions of DHCP from the left onto any of the positions on the right Not all functions are used

What is a practice that protects a network from VLAN hopping attacks?

A.

Enable dynamic ARP inspection

B. Configure an ACL to prevent traffic from changing VLANs

C. Change native VLAN to an unused VLAN ID

D. Implement port security on internet-facing VLANs

Which global command encrypt all passwords in the running configuration?

A. password-encrypt

B. enable password-encryption

C. enable secret

D. service password-encryption

Which mode allows access points to be managed by Cisco Wireless LAN Controllers?

A. autonomous

B. lightweight

C. bridge

D. mobility express