• 4.9/5.0
  • 1197 Questions
  • Updated on: 25-May-2026
  • Cisco Certified Network Associate
  • 211975 Prepared

Free Cisco 200-301 Practice Questions 2026 | Cisco Certified Network Associate


Topic 2, Exam B

Where does wireless authentication happen?

A. SSID

B. radio

C. band

D. Layer 2

D.   Layer 2

which IPv6 address block forwards packets to a multicast address rather than a unicast address?

A. 2000::/3

B. FC00::/7

C. FE80::/10

D. FF00::/12

D.   FF00::/12

When a site-to-site VPN is used, which protocol is responsible for the transport of user data?

A. IKEv2

B. IKEv1

C. IPsec

D. MD5

C.   IPsec

Explanation:

A site-to-site VPN allows offices in multiple fixed locations to establish secure connections with each other over a public network such as the Internet. A site-to-site VPN means that two sites create a VPN tunnel by encrypting and sending data between two devices. One set of rules for creating a siteto-site VPN is defined by IPsec

What is the expected outcome when an EUI-64 address is generated?

A. The seventh bit of the original MAC address of the interface is inverted

B. The interface ID is configured as a random 64-bit value

C. The characters FE80 are inserted at the beginning of the MAC address of the interface

D. The MAC address of the inteaaaaaaaacrface is used as the interface ID without modification

A.   The seventh bit of the original MAC address of the interface is inverted

Drag and drop the descriptions of AAA services from the left onto the corresponding services on the right.


What is a function of an endpoint on a network?

A. forwards traffic between VLANs on a network

B. connects server and client devices to a network

C. allows users to record data and transmit to a tile server

D. provides wireless services to users in a building

C.   allows users to record data and transmit to a tile server

Explanation:

An endpoint is a host that acts as the source or destination of data traffic flowing through a network. When you are at your PC, editing your CV and uploading it to a file server, you are sitting at an endpoint.

Which two spanning-tree states are bypassed on an interface running PortFast? (Choose two.)

A. disabled

B. listening

C. forwarding

D. learning

E. blocking

B.   listening
D.   learning

Refer to the exhibit.

A. Option A

B. Option B

C. Option C

D. Option D

C.   Option C

Refer to the exhibit.

A static route must be configured on R14 to forward traffic for the 172 21 34 0/25 network
that resides on R86 Which command must be used to fulfill the request?

A. ip route 172.21.34.0 255.255.255.192 10.73.65.65

B. ip route 172.21.34.0 255.255.255.192 10.73.65.65

C. ip route 172.21.34.0 255.255.255.0 10.73.65.65

D. ip route 172.21.34.0 255.255.128.0 10.73.65.64

E. ip route 172.21.34.0 255.255.255.128 10.7ac.65.66

D.   ip route 172.21.34.0 255.255.128.0 10.73.65.64

Which PoE mode enables powered-device detection and guarantees power when the device is detected?

A. dynamic

B. static

C. static

D. auto

B.   static

Page 44 out of 120 Pages