- 4.9/5.0
- 1197 Questions
- Updated on: 25-May-2026
- Cisco Certified Network Associate
- 211975 Prepared
Free Cisco 200-301 Practice Questions 2026 | Cisco Certified Network Associate
Topic 3: Exam Pool C
Refer to the exhibit.
Which next-hop IP address does Routed use for packets destined to host 10 10.13.158?
A. 10.10.10.5
B. 10.10.11.2
C. 10.10.12.2
D. 10.10.10.9
Which protocol is used for secure remote CLI access?
A. HTTPS
B. HTTP
C. Telnet
D. SSH
Which REST method updates an object in the Cisco DNA Center Intent API?
A. CHANGE
B. UPDATE
C. POST
D. PUT
Explanation:
PUT is most-often utilized for **update** capabilities, PUT-ing to a known
resource URI with the request body containing the newly-updated representation of the
original resource.However, PUT can also be used to create a resource in the case where
the resource ID is chosen by the client instead of by the server. In other words, if the PUT
is to a URI that contains the value of a non-existent resource ID. Again, the request body
contains a resource representation. Many feel this is convoluted and confusing.
Consequently, this method of creation should be used sparingly, if at all.Alternatively, use
POST to create new resources and provide the client-defined ID in the body
representation—presumably to a URI that doesn’t include the ID of the resource (see
POST below).On successful update, return 200 (or 204 if not returning any content in the
body) from a PUT. If using PUT for create, return HTTP status 201 on successful creation.
A body in the response is optional—providing one consumes more bandwidth. It is not
necessary to return a link via a Location header in the creation case since the client already
set the resource ID.PUT is not a safe operation, in that it modifies (or creates) state on the
server, but it is idempotent. In other words, if you create or update a resource using PUT
and then make that same call again, the resource is still there and still has the same state
as it did with the first call.If, for instance, calling PUT on a resource increments a counter
within the resource, the call is no longer idempotent. Sometimes that happens and it may
be enough to document that the call is not idempotent. However, it’s recommended to keep
PUT requests idempotent. It is strongly recommended to use POST for non-idempotent
requests.Examples:
https://www.restapitutorial.com/lessons/httpmethods.html
Refer to the exhibit

Users on existing VLAN 100 can reach sites on the Internet. Which action must the
administrator take to establish connectivity to the Internet for users in VLAN 200?
A. Define a NAT pool on the router.
B. Configure static NAT translations for VLAN 200.
C. Configure the ip nat outside command on another interface for VLAN 200.
D. Update the NAT INSIDF RANGFS ACL
Refer to the exhibit.
What does the switch do when it receives the frame from host A?
A. It drops the frame from the switch CAM table.
B. It floods the frame out of all ports except port Fa0/1.
C. It shuts down the port Fa0/1 and places it in err-disable mode.
D. It experiences a broadcast storm
What is a zero-day exploit?
A.
It is when a new network vulnerability is discovered before a fix is available
B. It is when the perpetrator inserts itself in a conversation between two parties and captures or alters data.
C. It is when the network is saturated with malicious traffic that overloads resources and bandwidth
D. It is when an attacker inserts malicious code into a SOL server.
It is when a new network vulnerability is discovered before a fix is available
Explanation:
https://www.kaspersky.com/resource-center/definitions/zero-day-exploit
Refer to the exhibit.
Which command must be issued to enable a floating static default route on router A?
A. lp route 0.0.0.0 0.0.0.0 192.168.1.2
B. ip default-gateway 192.168.2.1
C. ip route 0.0.0.0 0.0.0.0 192.168.2.1 10
D. ip route 0.0.0.0 0.0.0.0 192.168.1.2 10
Refer to the exhibit.
Which two commands must be added to update the configuration of router R1 so that it accepts only encrypted connections? (Choose two )
A. username CNAC secret R!41!4319115@
B. ip ssh version 2
C. line vty 0 4
D. crypto key generate rsa 1024
E. transport input ssh
E. transport input ssh
A Cisco engineer must configure a single switch interface to meet these requirements
• accept untagged frames and place them in VLAN 20
• accept tagged frames in VLAN 30 when CDP detects a Cisco IP phone
Which command set must the engineer apply?
A. Option A
B. Option B
C. Option C
D. Option D
| Page 45 out of 120 Pages |