• 4.9/5.0
  • 1197 Questions
  • Updated on: 25-May-2026
  • Cisco Certified Network Associate
  • 211975 Prepared

Free Cisco 200-301 Practice Questions 2026 | Cisco Certified Network Associate


Topic 4: Exam Pool D

Drag and drop the SNMP components from the left onto the description on the right.


Which enhancement is implemented in WPA3?

A. applies 802.1x authentication

B. usesTKIP

C. employs PKI to identify access points

D. protects against brute force attacks

D.   protects against brute force attacks

Refer to the exhibit.


Why is a first-hop redundancy protocol implemented?

A. to protect against default gateway failures

B. to prevent loops in a network

C. to enable multiple switches to operate as a single unit

D. to provide load-sharing for a multilink segment

A.   to protect against default gateway failures

Which IPv6 address range is suitable for anycast addresses for distributed services such DHCP or DNS?

A. FF00:1/12

B. 2001:db8:0234:ca3e::1/128

C. 2002:db84:3f37:ca98:be05:8/64

D. FE80::1/10

A.   FF00:1/12

Refer to the exhibit.

An engineer is checking the routing table in the main router to identify the path to a server on the network. Which route does the router use to reach the server at 192.168.2.2?

A. S 192.168.0.0/20 [1/0] via 10.1.1.1

B. S 192.168.2.0/29 [1/0] via 10.1.1.1

C. S 192.168.2.0/28 [1/0] via 10.1.1.1

D. S 192.168.1.0/30 [1/0] via 10.1.1.1

B.   S 192.168.2.0/29 [1/0] via 10.1.1.1

What provides connection redundancy increased bandwidth and load sharing between a wireless LAN controller and a Layer 2 switch?

A. VLAN trunking

B. tunneling

C. Afirst hop redundancy

D. link aggregation

D.   link aggregation

Refer to the exhibit.

A network administrator must permit traffic from the 10.10.0.0/24 subnet to the WAN on interlace Seria10. What is the effect of the configuration as the administrator applies the command?

A. The permit command fails and returns an error code.

B. The router accepts all incoming traffic to Seria10 with the last octet of the source IP set to 0.

C. The sourced traffic from IP range 10.0.0.0 -10.0.0.255 is allowed on Seria10.

D. The router fails to apply the access list to the interface.

C.   The sourced traffic from IP range 10.0.0.0 -10.0.0.255 is allowed on Seria10.

What does a switch do when it receives a frame whose destination MAC address is missing from the MAC address table?

A. It floods the frame unchanged across all remaining ports in the incoming VLAN.

B. It appends the table with a static entry for the MAC and shuts down the port.

C. It updates the CAM table with the destination MAC address of the frame.

D. It changes the checksum of the frame to a value that indicates an invalid frame.

A.   It floods the frame unchanged across all remaining ports in the incoming VLAN.

Refer to the exhibit.

The network engineer is configuring a new WLAN and is told to use a setup password for authentication instead of the RADIUS servers. Which additional set of tasks must the engineer perform to complete the configuration?

A. Disable PMF Enable PSK Enable 802.1x

B. Select WPA Policy Enable CCKM Enable PSK

C. Select WPA Policy Select WPA2 Policy Enable FT PSK

D. Select WPA2 Policy Disable PMF Enable PSK

D.   Select WPA2 Policy Disable PMF Enable PSK

Page 57 out of 120 Pages