About these questions
These five questions are original. We wrote them in the style of the CCNA v2.0 topics, one for each of the five domains. They are not real exam questions, and the real exam will word things differently. They also cover only a tiny part of each domain, so use them as a taster, not as a readiness test.
How to use these
Try each question without notes and commit to an answer before you open the explanation. Then read the explanation even if you were right, because the reason the closest wrong option fails is where the learning is. If a question felt shaky, go back to the matching section of domains explained.
Question 1 (Network Infrastructure and Connectivity)
A badge reader on the access network uses the address 172.16.40.37/27. The site standard says the router interface on each subnet takes the highest usable host address. Which address should the router interface use?
- A. 172.16.40.63
- B. 172.16.40.62
- C. 172.16.40.30
- D. 172.16.40.94
Show the answer and explanation
Correct answer: B. A /27 mask is 255.255.255.224, so subnets come in blocks of 32 addresses. The address 172.16.40.37 sits in the block that starts at 172.16.40.32 and ends at 172.16.40.63. The first address is the network address, the last (.63) is the broadcast address, and the highest usable host address is .62. Option A is the broadcast address, which cannot be assigned to an interface. Option C is the highest usable address of the previous block (.0 to .31), so it is the closest wrong option. Option D belongs to the next block.
Question 2 (Switching and Network Access)
A switch port feeds a wall jack in a meeting room and has PortFast enabled. Users sometimes plug in small desktop switches. The requirement is that the port goes into the err-disabled state as soon as it receives any BPDU. Which interface command meets the requirement?
- A. spanning-tree guard root
- B. spanning-tree bpduguard enable
- C. spanning-tree guard loop
- D. spanning-tree link-type point-to-point
Show the answer and explanation
Correct answer: B. BPDU guard shuts the port down into err-disabled the moment it receives any BPDU, which fits a port that should never connect to another switch. Root guard, the closest wrong option, reacts only to superior BPDUs and puts the port into a root-inconsistent state rather than err-disabled. Loop guard protects against BPDUs that stop arriving, which is a different failure. The link-type command only influences how fast Rapid PVST+ converges and does not protect anything.
Question 3 (IP Routing)
A router has this primary default route toward ISP A: `ip route 0.0.0.0 0.0.0.0 192.0.2.1`. The team wants a backup default route toward ISP B at 198.51.100.1 that is used only when the primary route disappears from the routing table. Which command does this?
- A. ip route 0.0.0.0 0.0.0.0 198.51.100.1
- B. ip route 0.0.0.0 0.0.0.0 198.51.100.1 1
- C. ip route 0.0.0.0 0.0.0.0 198.51.100.1 5
- D. ip route 0.0.0.0 0.0.0.0 198.51.100.1 255
Show the answer and explanation
Correct answer: C. A floating static route is an ordinary static route with an administrative distance higher than the route it backs up. A static route has a default distance of 1, so a distance of 5 loses to the primary route while it exists and takes over when it is removed. Options A and B both have a distance of 1, so the router would install both routes and share traffic. That makes A and B tied with the primary, not backups. Option D, the closest wrong option, sets 255, which Cisco IOS treats as unreachable, so the route would never be used.
Question 4 (Network Services and Security)
An engineer must create a numbered ACL that permits only HTTPS from the user subnet to a single server, matching on both destination address and destination port. Which two ACL numbers can the engineer use? Choose two.
- A. 55
- B. 120
- C. 1750
- D. 2300
- E. 2750
Show the answer and explanation
Correct answers: B and D. IOS uses the ACL number to decide the type. Extended ACLs, which can match source, destination, protocol, and ports, use 100 to 199 and the expanded range 2000 to 2699, so 120 and 2300 qualify. Standard ACLs use 1 to 99 and 1300 to 1999 and can match only the source address, which rules out 55 and 1750. Number 2750 is the closest wrong option because it looks like an expanded extended number, but it lies outside the 2000 to 2699 range.
Question 5 (AI, and Network Operations and Management)
A router is configured with `logging host 203.0.113.9` and `logging trap errors`. Which of these messages will the syslog server receive?
- A. %LINK-3-UPDOWN: Interface GigabitEthernet0/1, changed state to down
- B. %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/1, changed state to down
- C. %SYS-5-CONFIG_I: Configured from console by admin
- D. %SYS-6-LOGGINGHOST_STARTSTOP: Logging to host 203.0.113.9 started
Show the answer and explanation
Correct answer: A. In a syslog message, the number between the facility and the mnemonic is the severity. The command `logging trap errors` sends severity 3 (errors) and every more severe level, 0 to 3. Message A has severity 3, so it is sent. Messages B and C are severity 5 (notifications), and D is severity 6 (informational), so the trap level filters them out. The closest wrong option is B, because it describes the same link going down, but it carries a less severe level. Remember that lower numbers are more severe.
More guides for CCNA-200-301-V2
- Is CCNA 200-301 v2.0 Hard? An Honest Look
- CCNA 200-301 v2.0 Prerequisites and Skills
- CCNA 200-301 Renewal and Retakes Explained
- Is CCNA 200-301 Worth It? An Honest Look
- CCNA 200-301 v2.0 Cheat Sheet: Key Facts
- CCNA vs CCNA Automation: Which Exam First?
- CCNA vs Network+: Which Exam First?
Next step
Check your results against the exam format and plan your weeks with the study plan. For hundreds more original questions with a score per domain, try the CCNA 200-301 v2.0 practice tests.