Free CCNA 200-301 Practice Test

A floating static route is a backup route that is installed in the routing table only when the primary route disappears. To make a static route “float,” the administrator appends an administrative distance (AD) that is higher than the AD of the primary route. Command syntax: ip route In the topology, the existing primary default route uses next hop 192.168.2.1 with the default static-route AD of 1. Issuing ip route 0.0.0.0 0.0.0.0 192.168.1.2 10 creates a second (backup) default route that will be installed only if the primary route becomes unavailable, thereby satisfying the requirement for a floating static default route.

A. “lp route” is invalid IOS syntax; and no AD is supplied, so even if corrected it would not float.
B. ip default-gateway is used only on layer-2-only switches running no IP routing, not on a router.
C. Uses correct AD but points to 192.168.2.1—the same next hop as the primary route—so it would not act as a backup.

1. Cisco IOS IP Routing: Static Routes Configuration Guide

“Using a Floating Static Route

” section; IOS XE 17

para 2–3.

2. Odom

W. CCNA 200-301 Official Cert Guide Vol 1

Cisco Press

2020

p. 342–343 (“Creating Floating Static Routes”).

3. Cisco Networking Academy

CCNA: Routing & Switching Essentials v7 Course

Chapter 4

“Administrative Distance

” Table 4-2.

Syslog messages are categorized by severity levels, ranging from 0 (Emergency) to 7 (Debugging). The "notice" level, which has a severity value of 5, is defined for "normal but significant conditions." An interface changing its line protocol status (e.g., going from down to up, or up to down) is a classic example of such an event. While it is a normal part of network operation, it is significant enough to warrant a notification to the network administrator. The common LINEPROTO-5-UPDOWN message is a notice-level message that indicates this exact event has occurred.

A. A TCP connection being torn down is a routine operational event and is typically logged at the "informational" level (level 6), which is less severe than "notice."
B. ICMP is a connectionless protocol. The concept of building or tearing down an "ICMP connection" is technically incorrect, making this option invalid.
D. An expired certificate is a potential security or operational failure. This event would be logged at a higher severity level, such as "warning" (level 4) or "error" (level 3).

1. Odom

W. (2020). CCNA 200-301 Official Cert Guide

Volume 2. Cisco Press.

Chapter 24

"IP Services

" Section "Syslog

" Table 24-2 "Syslog Severity Levels and Keywords." This table defines severity level 5 (notice) as "Normal but significant conditions." The accompanying text explicitly uses an interface going up or down as an example of a notice-level event.

2. Cisco. (2023). Cisco IOS XE Amsterdam 17.3.x (Catalyst 9300 Switches) System Message Guide.

Chapter: "System Message Logging

" Section: "Severity Levels." This official documentation defines level 5 (notifications) as "Normal but significant conditions." It also documents the LINEPROTO-5-UPDOWN message

which is a level 5 message stating

"Interface [chars]

changed state to [chars]." This directly confirms that an interface status change is a notice-level event.

Private IPv4 addressing, as defined by IETF RFC 1918, is intended for devices within a private network that do not require direct accessibility from the public internet. The primary and most appropriate use is for hosts that need to communicate only with other hosts inside the same private network (e.g., an intranet). This practice conserves the limited supply of public IPv4 addresses and provides a layer of isolation. While these internal hosts can communicate with external resources, this is accomplished through a gateway device performing Network Address Translation (NAT), not by the private address itself. Therefore, communication only with internal hosts is the most precise description of the private address's fundamental role.

•
A. on the public-facing interface of a firewall This is incorrect. A public-facing interface connects to the internet and must have a globally unique, publicly routable IP address to be reachable. Using a private address here would make the firewall invisible to the public internet. •
B. to allow hosts inside to communicate in both directions with hosts outside the organization This is misleading. While hosts with private IPs can communicate with the outside, it is not the private address that allows this directly. This communication is enabled by a technology called Network Address Translation (NAT) running on a gateway, which translates the private address to a public one. /561 •
C. on internal hosts that stream data solely to external resources This is also misleading for the same reason as option B. The communication with external resources relies on a NAT gateway to translate the private IP to a public IP. The private address's role is for identification within the local network.

1. Internet Engineering Task Force (IETF) RFC 1918:

o Reference: Rekhter, Y., Moskowitz, B., Karrenberg, D., de Groot, G. J., & Lear, E. (1996). RFC 1918: Address Allocation for Private Internets.

Section 3.

o Quote/Paraphrase: This document describes address allocation for private internets. The authors state, "If a host in such an enterprise does not need to be reachable from outside its enterprise, it may be assigned an address from the private address space." This directly supports the idea that these addresses are for internal-only communication.

o URL: https://datatracker.ietf.org/doc/html/rfc1918

2. Cisco Official Documentation:

o Reference: Cisco, IP Addressing: What Are Public and Private IP

Addresses?.

o Quote/Paraphrase: Cisco's documentation clarifies that "Private IP addresses are used for local networks... These addresses are used for the computers, printers, and other devices in your home or office network...

They are not routable on the public internet." This reinforces that the core use is for local, internal devices.

o URL: https://www.cisco.com/c/en/us/support/docs/ip/routing-informationprotocol-rip/13788-3.html (This is an illustrative guide, but the principle is stated clearly).

3. Microsoft Learn Documentation:

o Reference: Microsoft Learn, Plan virtual networks.

o Quote/Paraphrase: In the context of Azure, Microsoft's documentation states, "You can use both public and private IP addresses in your Azure Virtual Network... Private IP addresses allow virtual machines to communicate with other resources in a virtual network..." This highlights

/561

the role of private IPs in facilitating communication within a defined network boundary.

o URL: https://learn.microsoft.com/en-us/azure/virtual-network/virtualnetwork-vnet-plan-design-arm#private-ip-addresses

/561

The exhibit indicates that switch Cat9300 sends Cisco Discovery Protocol (CDP) advertisements every 60 seconds. For neighboring devices to discover Cat9300 more rapidly, the interval between these advertisements must be reduced. The cdp timer global configuration command sets the transmission frequency for CDP packets. By configuring cdp timer 10, the switch will send its CDP updates every 10 seconds, allowing neighbors to learn about its presence much faster than the default 60-second interval.

B. PortFast is a Spanning Tree Protocol (STP) feature that accelerates port transition to the forwarding state; it does not alter the CDP advertisement rate.
C. The cdp holdtime command dictates how long a neighbor should retain CDP information before discarding it, not how quickly the neighbor discovers the switch initially.
D. Configuring the CDP timer on the neighbors would cause Cat9300 to discover them faster, which is the reverse of the requirement stated in the question.

1. Cisco Systems

Inc.

"IP Switching: Cisco Discovery Protocol Configuration Guide

Cisco IOS XE Gibraltar 16.12.x

" Cisco IOS XE Software Configuration

Section: "Configuring the Transmission Timer and Hold Time."

This document states

"The cdp timer command specifies the rate at which CDP packets are transmitted." This directly supports that modifying the timer on Cat9300 will change how frequently it sends advertisements to its neighbors.

2. Dye

M. A.

McDonald

R.

& Rufi

A. W. (2008). Network Fundamentals

CCNA Exploration Companion Guide. Cisco Press.

In Chapter 5

"Discovering Neighbors on the LAN

" the text explains the CDP commands: "The cdp timer global configuration command is used to change the CDP update frequency... The cdp holdtime global configuration command is used to specify the amount of time the receiving device should hold the information before discarding it." (p. 189). This clearly distinguishes the function of the timer from the holdtime.

3. Cisco Systems

Inc.

"Cisco IOS LAN Switching Configuration Guide

Release 12.2

" Cisco IOS Software Releases 12.2 Mainline

Chapter: "Configuring CDP

" Section: "Setting the Transmission Frequency and Hold Time."

This guide specifies

"To set the transmission frequency of CDP updates

use the cdp timer seconds command in global configuration mode." This confirms that option A is the correct command to achieve the desired outcome.

A server's core purpose on a network is defined by its role in the client-server model. Its primary functions are to run specialized software (applications/services) and to manage and provide resources to multiple clients, often simultaneously. It listens for, processes, and fulfills requests from these clients (workstations). This involves both running applications that send and receive data and handling numerous requests concurrently to ensure the network operates efficiently for all connected users.

• A: Redundancy through clustering is a high-availability strategy and an advanced feature, not a fundamental function of every server. Many servers operate as standalone machines without clustering. • D: Servers use standardized network protocols (like TCP/IP, HTTP) to communicate. Requiring the same operating system is false; networks are often heterogeneous (e.g., Linux and Windows servers interacting). • E: This describes a specific hosting model (dedicated hosting or a private cloud). A server's function is independent of its physical location or whether it serves a single tenant or multiple tenants.

/561

1. NIST Computer Security Resource Center (CSRC):

o Definition of a Server: The glossary defines a server as "A computer or device on a network that manages network resources" and "A system entity that provides a service in response to requests from clients." This directly supports options B and C.

o Source: NIST Special Publication 800-32, "Introduction to Industrial Control Systems Security."

o URL: https://csrc.nist.gov/glossary/term/server

2. Microsoft Learn Documentation:

o Description of Server Role: States that Windows Server is a platform for "building an infrastructure of connected applications, networks, and web services." It is designed for "enterprise-level management... data storage, applications, and communications" and "supports many business use cases, including web and application hosting." This confirms a server's role in running applications for clients (Option B).

o Source: Microsoft, "What Is Windows Server? Features and Functions Explained," Liquid Web Blog (referenced by Microsoft community content).

o URL: https://www.liquidweb.com/blog/windows-server/ (A more direct canonical link is: https://learn.microsoft.com/en-us/windows-server/getstarted/get-started-with-windows-server)

3. Cisco Networking Resources (via Third-Party Academic Explanation):

o Client-Server Model: Explains that the model "partitions tasks or workloads between the providers of a resource or service, called servers, and service requesters, called clients." This highlights that a server's job is to run services and handle client requests (Option B). It also notes servers

"can manage tasks and services efficiently for multiple clients simultaneously" (Option C).

o Source: Unstop, "The Client-Server Model Explained: From Basics To Implementation."

o URL: https://unstop.com/blog/client-server-model

4. Academic/Technical Explanation of Concurrency:

/561

o Handling Concurrent Requests: Technical articles explain that a core capability of a web server is to handle "multiple requests simultaneously (concurrently) on a single port." This ability to manage concurrent connections from many clients is a defining function of a server.

o Source: Baeldung on Computer Science, "How Does a Web Server Handle Concurrent Requests on a Single Port?"

o URL: https://www.baeldung.com/cs/web-server-concurrent-requests-oneport

/561

An endpoint, also referred to as an end device or host, is a device at the edge of a network that is the source or destination of network traffic. Its primary function is to provide an interface for users or applications to access network services and resources. Examples include personal computers, smartphones, servers, and IP phones. These devices run applications that originate and terminate data flows, rather than simply forwarding traffic between other devices.

B. Passing unicast communication between other hosts is a primary function of intermediary devices like switches and routers.
C. Transmitting broadcast traffic between devices in the same VLAN is a function performed by a Layer 2 switch.
D. Providing security between trusted and untrusted network sections is the main role of a firewall or other security appliance. ---

1. Cisco Networking Academy. (2020). CCNAv7: Introduction to Networks (ITN). Module 1, "Networking Today," Section 1.1.1.2, "End Devices." This section states, "An end device is where a message originates from or where it is received... To distinguish one end device from another, each end device on a network is identified by an address." This directly supports the role of an endpoint as the source/destination for user-initiated communication.

2. Odom, W. (2019). CCNA 200-301 Official Cert Guide, Volume 1. Cisco Press. Chapter 1, "Introduction to TCP/IP Networking," Section "TCP/IP Application Layer." The text explains that applications, which run on hosts (endpoints), provide the services that users interact with, stating, "The application layer provides an interface between the software running on a computer and the network itself."

3. Kurose, J. F., & Ross, K. W. (2021). Computer Networking: A Top-Down Approach (8th ed.). Pearson. Chapter 1, "Computer Networks and the Internet," Section 1.3, "The Network Edge." This university-level textbook defines the network edge as consisting of "end systems" or "hosts," which are described as the devices that run network applications for users. This aligns with the function of an endpoint being used directly by an individual.

Cisco AireOS Wireless LAN Controllers (WLCs) are designed with a specific limit on the number of concurrent administrative sessions to ensure the stability and performance of the management plane. According to official Cisco documentation for multiple AireOS versions, a maximum of five users are permitted to be logged into the controller's Graphical User Interface (GUI) simultaneously. This is a system-level constraint and is not user-configurable. Any attempt by a sixth user to log in will be denied until one of the active sessions is terminated.

A. 2: This value is incorrect. While limiting administrative access is a common practice, the specific limit for the AireOS GUI is higher than two.
C. 8: This value is incorrect. The documented limit for simultaneous GUI sessions on AireOS controllers is five, not eight.
D. 9: This value is incorrect. The official documentation consistently states the maximum number of simultaneous GUI users is five. ---

1. Cisco Systems

Inc. (2020). Cisco Wireless LAN Controller Configuration Guide

Release 8.10. "Configuring User Accounts" chapter

"Guidelines and Limitations for User Accounts" section.

Quote: "A maximum of five users are allowed to log into the controller GUI simultaneously."

2. Cisco Systems

Inc. (2019). Cisco Wireless LAN Controller Configuration Guide

Release 8.5. "Configuring User Accounts" chapter

"Guidelines and Limitations for User Accounts" section.

Quote: "A maximum of five users are allowed to log into the controller GUI simultaneously."

3. Cisco Systems

Inc. (2015). Cisco Wireless LAN Controller Configuration Guide

Release 8.0. "Configuring User Accounts" chapter

"Guidelines and Limitations for User Accounts" section.

Quote: "A maximum of five users are allowed to log into the controller GUI simultaneously."

The fundamental principle of Software-Defined Networking (SDN) is the separation of the control plane and the data plane. In traditional networks, each device has its own control plane to make forwarding decisions. SDN abstracts this function, removing the control plane logic from individual network devices and centralizing it in a software-based component called the SDN controller. This centralized control plane has a global view of the network, allowing it to make intelligent, system-wide decisions and program the data planes of the network devices accordingly.

A. Data: The data plane (or forwarding plane) remains distributed on the individual network devices (switches, routers) to forward packets based on the controller's instructions.
C. Application: The application plane exists above the control plane, using northbound APIs to request network services and resources from the centralized controller.
D. Services: "Services" is not a formal plane in the three-tiered SDN architecture model (Application, Control, Data/Infrastructure). Network services are implemented via the application and control planes.

1. Odom, W. (2020). CCNA 200-301 Official Cert Guide, Volume 2. Cisco Press. Chapter 24, "Understanding SDN and Network Programmability," section "The SDN Control and Data Planes," p. 568, states, "The key to the whole idea of SDN is to separate the control plane and data plane, remove the control plane from the networking devices, and run the control plane software on a centralized controller."

2. Open Networking Foundation. (2012). Software-Defined Networking: The New Norm for Networks (White Paper). ONF-WP-002-1.0. Section 2.1, "The SDN Architecture," p. 3, describes the architecture: "The control logic is moved to a centralized controller... The network intelligence is logically centralized in software-based SDN controllers."

3. Cisco. (2023). Cisco SD-Access Solution Design Guide (CVD). Section: "Software-Defined Access Architecture," subsection "Controller," states, "The controller provides the centralized management and control functions for the network."

A DHCP relay agent is a host or, more commonly, a router feature that forwards DHCP packets between clients and servers when they are not on the same physical subnet. The initial client request, a DHCPDISCOVER message, is a layer 2 broadcast, which routers do not forward by default. The relay agent, located on the client's subnet, intercepts this broadcast and forwards it as a unicast packet to a pre-configured DHCP server on a different subnet. This mechanism is essential for centralized DHCP management in a routed network environment.

•
B. DHCP server: The DHCP server is the entity that receives the forwarded request and provides an IP address configuration; it does not perform the forwarding function between different networks. •
C. DHCPDISCOVER: This is the name of the broadcast message a DHCP client sends to locate a DHCP server. It is a type of packet, not a network device. •
D. DHCPOFFER: This is the name of the message a DHCP server sends in response to a DHCPDISCOVER message, offering an IP address to the client. It is a type of packet, not a network device.

/561

1. Internet Engineering Task Force (IETF) RFC 2131: "Dynamic Host Configuration Protocol". Section 4.1, "DHCP relay agents," explicitly states:

"DHCP relay agents are used to forward requests and replies between clients and servers when they are not on the same physical subnet."

o URL: https://datatracker.ietf.org/doc/html/rfc2131#section-4.1

o Reference: Section 4.1, Paragraph 1.

2. Cisco IOS XE Software Documentation: "Configuring the Cisco IOS XE DHCP Relay Agent". The document states, "A DHCP relay agent is a Layer 3 device that forwards DHCP packets between clients and servers... If you do not have a DHCP relay agent, hosts on a subnet that does not have a DHCP server will not be able to get IP addresses."

o URL: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipaddrdhcp/configuration/xe-16-12/dhcp-xe-16-12-book/dhcp-relay-agent.html

o Reference: "Information About the DHCP Relay Agent" section.

3. Microsoft Learn Documentation: "What is DHCP Relay Agent?". The documentation explains, "The DHCP Relay Agent is a component that can be used to relay DHCP messages between DHCP clients and DHCP servers on different IP networks."

o URL: https://learn.microsoft.com/en-us/windows-server/remote/remoteaccess/ras/dhcp/what-is-dhcp-relay-agent

o Reference: Introduction paragraph.

/561

An endpoint, also known as an end device or host, is a device on a network that serves as the source or destination for data communications. Examples include computers, servers, smartphones, and IoT devices. The primary function of an endpoint is to run applications that create, process, and receive data. Option C describes a specific application-level function—recording and transmitting data—which is performed by an endpoint (e.g., a user's computer). The other options describe functions of intermediary network infrastructure devices, not endpoints.

A. This describes inter-VLAN routing, a function performed by a Layer 3 switch or a router, which are intermediary network devices.
B. This describes the function of an access layer switch, which is an intermediary device used to connect endpoints to the network.
D. This describes the function of a Wireless Access Point (WAP), an intermediary device that provides network connectivity to wireless endpoints.

1. Cisco Networking Academy

CCNAv7: Introduction to Networks (ITN) curriculum

Module 1: Networking Today.

Section 1.2.1

"End Devices

" states: "The network devices that people are most familiar with are called end devices... An end device is either the source or destination of a message transmitted over the network." This directly defines the role of an endpoint as the originator or receiver of data

as exemplified in option C.

Section 1.2.2

"Intermediary Network Devices

" lists routers

switches

and wireless access points as devices that "connect the end devices to the network" and "direct the path of the data

" which aligns with the functions described in options A

B

and D.

2. Odom

W. (2019). CCNA 200-301 Official Cert Guide

Volume 1. Cisco Press.

Chapter 2

"Fundamentals of Ethernet LANs

" Section "Building a Simple Network with Hubs and Switches

" distinguishes between end-user devices (endpoints) and networking devices. The text clarifies that PCs (endpoints) "create and receive the data

" while switches (intermediary devices) forward it. This supports that an endpoint's role is data creation/reception (Option C) and not forwarding/connecting (Options A

B

D).