CCNA 200-301 Practice Questions

The solution requires two static routes on R1 that leverage the longest prefix match rule.

1. To direct all traffic for the 2001:db8:23::/64 network to R2, a static route is needed for that entire prefix with R2's link-local or global address as the next hop. The command ipv6 route 2001:db8:23::/64 fd00:12::2 correctly configures this path.

2. To create a preferred path for the specific host 2001:db8:23::14 via R3, a more specific route must be created. A host route with a /128 prefix is more specific than the /64 network route. The command ipv6 route 2001:db8:23::14/128 fd00:13::3 establishes this specific route. When both routes exist, the router will choose the /128 route for host ::14 due to the longest prefix match rule.

A. This command creates a host route for the network address 2001:db8:23:: itself, not for the entire /64 network as required.

C. The prefix 2001:db8:23::14/64 is invalid. For a network prefix, the host bits (the last 64 bits in this case) must be set to zero.

D. The prefix 2001:db8:23::14/64 is invalid. A network prefix cannot have non-zero host bits; the correct network prefix is 2001:db8:23::/64.

1. Cisco Systems

Inc. (2020). Implementing Static Routes. In CCNA 200-301 Official Cert Guide

Volume 1 (pp. 503-504

520-521). Cisco Press. This section explains the longest prefix match rule and provides configuration examples for the ipv6 route command

demonstrating how a more specific route (e.g.

/128) is preferred over a less specific one (e.g.

/64).

2. Cisco IOS IPv6 Command Reference. (n.d.). ipv6 route. Cisco. Retrieved from the official Cisco documentation portal. The documentation specifies the command syntax as ipv6 route ipv6-prefix/prefix-length { ipv6-address | interface-type interface-number [ipv6-address] } [administrative-distance]

confirming the structure of the correct answers.

3. Kurose

J. F.

& Ross

K. W. (2017). Computer Networking: A Top-Down Approach (7th ed.). Pearson. In Chapter 4

Section 4.2

"What's Inside a Router?"

the text describes the forwarding function and the longest prefix matching rule used by routers to determine the appropriate output link for an incoming packet.

Syslog messages are categorized by severity levels, ranging from 0 (Emergency) to 7 (Debugging). The "notice" level, which has a severity value of 5, is defined for "normal but significant conditions." An interface changing its line protocol status (e.g., going from down to up, or up to down) is a classic example of such an event. While it is a normal part of network operation, it is significant enough to warrant a notification to the network administrator. The common LINEPROTO-5-UPDOWN message is a notice-level message that indicates this exact event has occurred.

A. A TCP connection being torn down is a routine operational event and is typically logged at the "informational" level (level 6), which is less severe than "notice."

B. ICMP is a connectionless protocol. The concept of building or tearing down an "ICMP connection" is technically incorrect, making this option invalid.

D. An expired certificate is a potential security or operational failure. This event would be logged at a higher severity level, such as "warning" (level 4) or "error" (level 3).

1. Odom

W. (2020). CCNA 200-301 Official Cert Guide

Volume 2. Cisco Press.

Chapter 24

"IP Services

" Section "Syslog

" Table 24-2 "Syslog Severity Levels and Keywords." This table defines severity level 5 (notice) as "Normal but significant conditions." The accompanying text explicitly uses an interface going up or down as an example of a notice-level event.

2. Cisco. (2023). Cisco IOS XE Amsterdam 17.3.x (Catalyst 9300 Switches) System Message Guide.

Chapter: "System Message Logging

" Section: "Severity Levels." This official documentation defines level 5 (notifications) as "Normal but significant conditions." It also documents the LINEPROTO-5-UPDOWN message

which is a level 5 message stating

"Interface [chars]

changed state to [chars]." This directly confirms that an interface status change is a notice-level event.

Private IPv4 addressing, as defined by IETF RFC 1918, is intended for devices within a

private network that do not require direct accessibility from the public internet. The

primary and most appropriate use is for hosts that need to communicate only with

other hosts inside the same private network (e.g., an intranet). This practice

conserves the limited supply of public IPv4 addresses and provides a layer of isolation.

While these internal hosts can communicate with external resources, this is

accomplished through a gateway device performing Network Address Translation (NAT),

not by the private address itself. Therefore, communication only with internal hosts is

the most precise description of the private address's fundamental role.

•

A. on the public-facing interface of a firewall This is incorrect. A public-facing

interface connects to the internet and must have a globally unique, publicly

routable IP address to be reachable. Using a private address here would make

the firewall invisible to the public internet.

•

B. to allow hosts inside to communicate in both directions with hosts

outside the organization This is misleading. While hosts with private IPs can

communicate with the outside, it is not the private address that allows this

directly. This communication is enabled by a technology called Network Address

Translation (NAT) running on a gateway, which translates the private address to a

public one.

/561

•

C. on internal hosts that stream data solely to external resources This is

also misleading for the same reason as option B. The communication with

external resources relies on a NAT gateway to translate the private IP to a public

IP. The private address's role is for identification within the local network.

1. Internet Engineering Task Force (IETF) RFC 1918:

o Reference: Rekhter, Y., Moskowitz, B., Karrenberg, D., de Groot, G. J., &

Lear, E. (1996). RFC 1918: Address Allocation for Private Internets.

Section 3.

o Quote/Paraphrase: This document describes address allocation for

private internets. The authors state, "If a host in such an enterprise does

not need to be reachable from outside its enterprise, it may be assigned

an address from the private address space." This directly supports the

idea that these addresses are for internal-only communication.

o URL: https://datatracker.ietf.org/doc/html/rfc1918

2. Cisco Official Documentation:

o Reference: Cisco, IP Addressing: What Are Public and Private IP

Addresses?.

o Quote/Paraphrase: Cisco's documentation clarifies that "Private IP

addresses are used for local networks... These addresses are used for the

computers, printers, and other devices in your home or office network...

They are not routable on the public internet." This reinforces that the core

use is for local, internal devices.

o URL: https://www.cisco.com/c/en/us/support/docs/ip/routing-informationprotocol-rip/13788-3.html (This is an illustrative guide, but the principle is

stated clearly).

3. Microsoft Learn Documentation:

o Reference: Microsoft Learn, Plan virtual networks.

o Quote/Paraphrase: In the context of Azure, Microsoft's documentation

states, "You can use both public and private IP addresses in your Azure

Virtual Network... Private IP addresses allow virtual machines to

communicate with other resources in a virtual network..." This highlights

/561

the role of private IPs in facilitating communication within a defined

network boundary.

o URL: https://learn.microsoft.com/en-us/azure/virtual-network/virtualnetwork-vnet-plan-design-arm#private-ip-addresses

/561

In the REST architectural style and HTTP specifications (RFC 7231), methods map to specific CRUD (Create, Read, Update, Delete) operations:

• GET is used to retrieve (read) a representation of a resource.
• POST is designed to process the provided representation, most commonly used to create a new resource on the server.
• DELETE requests the removal of the resource specified by the URI.
• PUT replaces all current representations of the target resource with the request payload, effectively acting as an update (or create if it doesn't exist) operation. While PATCH also modifies resources, PUT is the standard method for complete updates/replacements in this context.

IETF RFC 7231, "Hypertext Transfer Protocol (HTTP/1.1): Semantics and Content".

GET: Section 4.3.1 (Page 24).

POST: Section 4.3.3 (Page 25).

PUT: Section 4.3.4 (Page 26).

DELETE: Section 4.3.5 (Page 29).

Available at: https://doi.org/10.17487/RFC7231

Fielding, R. T. (2000). Architectural Styles and the Design of Network-based Software Architectures (Doctoral dissertation). University of California, Irvine. Chapter 5, Section 5.1.5 (Uniform Interface).

Defines the constraints of the REST interface which HTTP methods implement.

Available at: https://ics.uci.edu/~fielding/pubs/dissertation/rest_arch_style.htm

A server's core purpose on a network is defined by its role in the client-server model. Its

primary functions are to run specialized software (applications/services) and to manage

and provide resources to multiple clients, often simultaneously. It listens for, processes,

and fulfills requests from these clients (workstations). This involves both running

applications that send and receive data and handling numerous requests concurrently

to ensure the network operates efficiently for all connected users.

•

A: Redundancy through clustering is a high-availability strategy and an advanced

feature, not a fundamental function of every server. Many servers operate as

standalone machines without clustering.

•

D: Servers use standardized network protocols (like TCP/IP, HTTP) to

communicate. Requiring the same operating system is false; networks are often

heterogeneous (e.g., Linux and Windows servers interacting).

•

E: This describes a specific hosting model (dedicated hosting or a private cloud).

A server's function is independent of its physical location or whether it serves a

single tenant or multiple tenants.

/561

1. NIST Computer Security Resource Center (CSRC):

o Definition of a Server: The glossary defines a server as "A computer or

device on a network that manages network resources" and "A system

entity that provides a service in response to requests from clients." This

directly supports options B and C.

o Source: NIST Special Publication 800-32, "Introduction to Industrial

Control Systems Security."

o URL: https://csrc.nist.gov/glossary/term/server

2. Microsoft Learn Documentation:

o Description of Server Role: States that Windows Server is a platform for

"building an infrastructure of connected applications, networks, and web

services." It is designed for "enterprise-level management... data storage,

applications, and communications" and "supports many business use

cases, including web and application hosting." This confirms a server's

role in running applications for clients (Option B).

o Source: Microsoft, "What Is Windows Server? Features and Functions

Explained," Liquid Web Blog (referenced by Microsoft community content).

o URL: https://www.liquidweb.com/blog/windows-server/ (A more direct

canonical link is: https://learn.microsoft.com/en-us/windows-server/getstarted/get-started-with-windows-server)

3. Cisco Networking Resources (via Third-Party Academic Explanation):

o Client-Server Model: Explains that the model "partitions tasks or

workloads between the providers of a resource or service, called servers,

and service requesters, called clients." This highlights that a server's job is

to run services and handle client requests (Option B). It also notes servers

"can manage tasks and services efficiently for multiple clients

simultaneously" (Option C).

o Source: Unstop, "The Client-Server Model Explained: From Basics To

Implementation."

o URL: https://unstop.com/blog/client-server-model

4. Academic/Technical Explanation of Concurrency:

/561

o Handling Concurrent Requests: Technical articles explain that a core

capability of a web server is to handle "multiple requests simultaneously

(concurrently) on a single port." This ability to manage concurrent

connections from many clients is a defining function of a server.

o Source: Baeldung on Computer Science, "How Does a Web Server

Handle Concurrent Requests on a Single Port?"

o URL: https://www.baeldung.com/cs/web-server-concurrent-requests-oneport

/561

An endpoint, also referred to as an end device or host, is a device at the edge of a network that is the source or destination of network traffic. Its primary function is to provide an interface for users or applications to access network services and resources. Examples include personal computers, smartphones, servers, and IP phones. These devices run applications that originate and terminate data flows, rather than simply forwarding traffic between other devices.

B. Passing unicast communication between other hosts is a primary function of intermediary devices like switches and routers.

C. Transmitting broadcast traffic between devices in the same VLAN is a function performed by a Layer 2 switch.

D. Providing security between trusted and untrusted network sections is the main role of a firewall or other security appliance.

---

1. Cisco Networking Academy. (2020). CCNAv7: Introduction to Networks (ITN). Module 1

"Networking Today

" Section 1.1.1.2

"End Devices." This section states

"An end device is where a message originates from or where it is received... To distinguish one end device from another

each end device on a network is identified by an address." This directly supports the role of an endpoint as the source/destination for user-initiated communication.

2. Odom

W. (2019). CCNA 200-301 Official Cert Guide

Volume 1. Cisco Press. Chapter 1

"Introduction to TCP/IP Networking

" Section "TCP/IP Application Layer." The text explains that applications

which run on hosts (endpoints)

provide the services that users interact with

stating

"The application layer provides an interface between the software running on a computer and the network itself."

3. Kurose

J. F.

& Ross

K. W. (2021). Computer Networking: A Top-Down Approach (8th ed.). Pearson. Chapter 1

"Computer Networks and the Internet

" Section 1.3

"The Network Edge." This university-level textbook defines the network edge as consisting of "end systems" or "hosts

" which are described as the devices that run network applications for users. This aligns with the function of an endpoint being used directly by an individual.

Cisco AireOS Wireless LAN Controllers (WLCs) are designed with a specific limit on the number of concurrent administrative sessions to ensure the stability and performance of the management plane. According to official Cisco documentation for multiple AireOS versions, a maximum of five users are permitted to be logged into the controller's Graphical User Interface (GUI) simultaneously. This is a system-level constraint and is not user-configurable. Any attempt by a sixth user to log in will be denied until one of the active sessions is terminated.

A. 2: This value is incorrect. While limiting administrative access is a common practice, the specific limit for the AireOS GUI is higher than two.

C. 8: This value is incorrect. The documented limit for simultaneous GUI sessions on AireOS controllers is five, not eight.

D. 9: This value is incorrect. The official documentation consistently states the maximum number of simultaneous GUI users is five.

---

1. Cisco Systems

Inc. (2020). Cisco Wireless LAN Controller Configuration Guide

Release 8.10. "Configuring User Accounts" chapter

"Guidelines and Limitations for User Accounts" section.

Quote: "A maximum of five users are allowed to log into the controller GUI simultaneously."

2. Cisco Systems

Inc. (2019). Cisco Wireless LAN Controller Configuration Guide

Release 8.5. "Configuring User Accounts" chapter

"Guidelines and Limitations for User Accounts" section.

Quote: "A maximum of five users are allowed to log into the controller GUI simultaneously."

3. Cisco Systems

Inc. (2015). Cisco Wireless LAN Controller Configuration Guide

Release 8.0. "Configuring User Accounts" chapter

"Guidelines and Limitations for User Accounts" section.

Quote: "A maximum of five users are allowed to log into the controller GUI simultaneously."

The fundamental principle of Software-Defined Networking (SDN) is the separation of the control plane and the data plane. In traditional networks, each device has its own control plane to make forwarding decisions. SDN abstracts this function, removing the control plane logic from individual network devices and centralizing it in a software-based component called the SDN controller. This centralized control plane has a global view of the network, allowing it to make intelligent, system-wide decisions and program the data planes of the network devices accordingly.

A. Data: The data plane (or forwarding plane) remains distributed on the individual network devices (switches, routers) to forward packets based on the controller's instructions.

C. Application: The application plane exists above the control plane, using northbound APIs to request network services and resources from the centralized controller.

D. Services: "Services" is not a formal plane in the three-tiered SDN architecture model (Application, Control, Data/Infrastructure). Network services are implemented via the application and control planes.

1. Odom

W. (2020). CCNA 200-301 Official Cert Guide

Volume 2. Cisco Press. Chapter 24

"Understanding SDN and Network Programmability

" section "The SDN Control and Data Planes

" p. 568

states

"The key to the whole idea of SDN is to separate the control plane and data plane

remove the control plane from the networking devices

and run the control plane software on a centralized controller."

2. Open Networking Foundation. (2012). Software-Defined Networking: The New Norm for Networks (White Paper). ONF-WP-002-1.0. Section 2.1

"The SDN Architecture

" p. 3

describes the architecture: "The control logic is moved to a centralized controller... The network intelligence is logically centralized in software-based SDN controllers."

3. Cisco. (2023). Cisco SD-Access Solution Design Guide (CVD). Section: "Software-Defined Access Architecture

" subsection "Controller

" states

"The controller provides the centralized management and control functions for the network."

A DHCP relay agent is a host or, more commonly, a router feature that forwards DHCP

packets between clients and servers when they are not on the same physical subnet.

The initial client request, a DHCPDISCOVER message, is a layer 2 broadcast, which

routers do not forward by default. The relay agent, located on the client's subnet,

intercepts this broadcast and forwards it as a unicast packet to a pre-configured DHCP

server on a different subnet. This mechanism is essential for centralized DHCP

management in a routed network environment.

•

B. DHCP server: The DHCP server is the entity that receives the forwarded

request and provides an IP address configuration; it does not perform the

forwarding function between different networks.

•

C. DHCPDISCOVER: This is the name of the broadcast message a DHCP client

sends to locate a DHCP server. It is a type of packet, not a network device.

•

D. DHCPOFFER: This is the name of the message a DHCP server sends in

response to a DHCPDISCOVER message, offering an IP address to the client. It

is a type of packet, not a network device.

/561

1. Internet Engineering Task Force (IETF) RFC 2131: "Dynamic Host

Configuration Protocol". Section 4.1, "DHCP relay agents," explicitly states:

"DHCP relay agents are used to forward requests and replies between clients

and servers when they are not on the same physical subnet."

o URL: https://datatracker.ietf.org/doc/html/rfc2131#section-4.1

o Reference: Section 4.1, Paragraph 1.

2. Cisco IOS XE Software Documentation: "Configuring the Cisco IOS XE DHCP

Relay Agent". The document states, "A DHCP relay agent is a Layer 3 device

that forwards DHCP packets between clients and servers... If you do not have a

DHCP relay agent, hosts on a subnet that does not have a DHCP server will not

be able to get IP addresses."

o URL: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipaddrdhcp/configuration/xe-16-12/dhcp-xe-16-12-book/dhcp-relay-agent.html

o Reference: "Information About the DHCP Relay Agent" section.

3. Microsoft Learn Documentation: "What is DHCP Relay Agent?". The

documentation explains, "The DHCP Relay Agent is a component that can be

used to relay DHCP messages between DHCP clients and DHCP servers on

different IP networks."

o URL: https://learn.microsoft.com/en-us/windows-server/remote/remoteaccess/ras/dhcp/what-is-dhcp-relay-agent

o Reference: Introduction paragraph.

/561

An endpoint, also known as an end device or host, is a device on a network that serves as the source or destination for data communications. Examples include computers, servers, smartphones, and IoT devices. The primary function of an endpoint is to run applications that create, process, and receive data. Option C describes a specific application-level function—recording and transmitting data—which is performed by an endpoint (e.g., a user's computer). The other options describe functions of intermediary network infrastructure devices, not endpoints.

A. This describes inter-VLAN routing, a function performed by a Layer 3 switch or a router, which are intermediary network devices.

B. This describes the function of an access layer switch, which is an intermediary device used to connect endpoints to the network.

D. This describes the function of a Wireless Access Point (WAP), an intermediary device that provides network connectivity to wireless endpoints.

1. Cisco Networking Academy

CCNAv7: Introduction to Networks (ITN) curriculum

Module 1: Networking Today.

Section 1.2.1

"End Devices

" states: "The network devices that people are most familiar with are called end devices... An end device is either the source or destination of a message transmitted over the network." This directly defines the role of an endpoint as the originator or receiver of data

as exemplified in option C.

Section 1.2.2

"Intermediary Network Devices

" lists routers

switches

and wireless access points as devices that "connect the end devices to the network" and "direct the path of the data

" which aligns with the functions described in options A

B

and D.

2. Odom

W. (2019). CCNA 200-301 Official Cert Guide

Volume 1. Cisco Press.

Chapter 2

"Fundamentals of Ethernet LANs

" Section "Building a Simple Network with Hubs and Switches

" distinguishes between end-user devices (endpoints) and networking devices. The text clarifies that PCs (endpoints) "create and receive the data

" while switches (intermediary devices) forward it. This supports that an endpoint's role is data creation/reception (Option C) and not forwarding/connecting (Options A

B

D).