200-301 CCNA · Cisco · Updated September 2026
200-301 CCNA practice questions
Original & expert-reviewed · explanation for every option · no dumps
Practise 200-301 CCNA with original, expert-reviewed questions — each with an explanation for every option, linked to the source, across the full exam blueprint. No dumps, no ads, 6 free to start.
Free: 6 questions in study mode, no card. Full 200-301 CCNA bank with mock exams and the error log: $15 one-time, or every exam with All-Access for $19/mo or $119/yr.
What makes these different from dumps
📚 An explanation for every option
Not just the right answer — why each wrong option is wrong, linked to the source. Wrong answers teach the most.
⏱️ Real-format timed mocks
Sit full 100-question, 120-minute exams and get a readiness report by area — know when you're ready.
↻ Spaced-repetition error log
Every miss comes back on a 1 → 3 → 7 → 16-day schedule, so the fixes actually stick.
🔖 Original & reviewed
Every question is written to test the concepts and reviewed before it ships — never copied or leaked “dumps”.
Try 10 real 200-301 CCNA questions — free, no sign-up
A representative slice of the bank: every exam domains, mixed difficulty (hard ones included). Answers are one tap away — no email wall.
1/10 · IP Connectivity
A routing table contains this entry:
D 10.2.4.0/24 [90/2195456] via 10.1.1.2, 00:04:12, GigabitEthernet0/0
Which statement about the entry is accurate?
AThe prefix is directly connected to GigabitEthernet0/0, and 90 is the interface cost the router assigned to it.
BThe prefix was learned by EIGRP; 90 is the administrative distance and 2195456 is the EIGRP metric.
CThe prefix was learned by OSPF as an external route; 90 is the metric and 2195456 the cost to the advertising router.
DThe prefix was received from a DHCP server, and the two numbers give the remaining lease time in seconds.
Show answer & explanation
B is correct. Topic 3.1.a, 3.1.e and 3.1.f. The legend printed by show ip route maps each code to its source: C connected, L local, S static, D EIGRP, EX external EIGRP, O OSPF, O IA OSPF inter area, R RIP, B BGP. After the prefix, Cisco prints [administrative distance/metric]: the first value is the trust level of the source (EIGRP internal is 90) and the second is the protocol's own metric, here the EIGRP composite metric. The trailing fields are the next-hop address, the age of the entry and the outgoing interface.
↗ Cisco 200-301 CCNA v1.1 Exam Topics — Section 3: IP Connectivity
2/10 · Network Fundamentals
A data center fabric is cabled so that each of 12 access-layer switches has exactly one link to each of 4 upper-tier switches. No cable joins two access-layer switches, and no cable joins two upper-tier switches. Which statement describes how traffic crosses this fabric?
AA flow between servers on two different access-layer switches crosses exactly one upper-tier switch.
BServers on two different access-layer switches exchange frames directly, bypassing the upper tier.
COne uplink per access-layer switch forwards while the other three stay in a blocking state.
DTraffic between two upper-tier switches is carried across the access layer between them.
Show answer & explanation
A is correct. Topic 1.2.c. Cisco describes the two-tier Clos design as one in which every leaf layer switch is connected to each of the spine layer switches in a full-mesh topology, while leaves are not cabled to leaves and spines are not cabled to spines. The consequence is that any endpoint is the same number of hops (leaf, spine, leaf) from any endpoint on another leaf, which is why the design is chosen for predictable latency on east-west traffic. Capacity is scaled by adding spines (limited by uplinks per leaf) or leaves (limited by ports per spine).
↗ Cisco 200-301 CCNA v1.1 Exam Topics — Section 1: Network Fundamentals
3/10 · Network Access
A third-party switch that supports IEEE 802.1AB is connected to SW1. The link is up and passing traffic, but show cdp neighbors on SW1 is empty for that port and the neighbor's own neighbor table is empty as well. Both devices are at their factory discovery defaults. Which action lets SW1 and the neighbor see each other?
AEnter lldp run in global configuration mode on SW1 and on the neighbor.
BEnter lldp transmit and lldp receive on the interface at each end of the link.
CEnter lldp run on SW1 and leave the neighbor at its shipped configuration.
DSet lldp timer 30 and lldp holdtime 120 in global configuration mode on both devices.
Show answer & explanation
A is correct. Topic 2.3. Cisco Discovery Protocol is proprietary and is enabled by default, which is why it shows nothing when the neighbor is from another vendor. LLDP is the IEEE 802.1AB standard protocol used for interoperability with other vendors, and Cisco documents its default global state as disabled with a holdtime of 120 seconds, a transmit timer of 30 seconds and a reinitialization delay of 2 seconds. Turning it on requires lldp run in global configuration mode; lldp transmit and lldp receive control the behavior per interface, and show lldp neighbors verifies the result.
↗ Cisco 200-301 CCNA v1.1 Exam Topics — Section 2: Network Access
4/10 · Security Fundamentals
A security manager files four recurring activities under the headings of the annual security-program report. Each of the four reaches every employee in the company. Which of them belongs under training?
AA course every employee completes, ending in a graded exercise in handling customer records
BA course every employee watches, presenting the fraud attempts the service desk saw last quarter
CCorridor posters that remind every employee to lock a screen before leaving a desk
DA quarterly mail to every employee listing the phishing domains blocked at the gateway
Show answer & explanation
A is correct. Topic 5.2. The exam topic names three program elements - user awareness, training and physical access control - and the line between the first two runs through purpose rather than audience. NIST SP 800-50 states in section 2.2, Awareness, that awareness is not training, that the purpose of awareness presentations is simply to focus attention on security and to allow individuals to recognize IT security concerns and respond accordingly, and that in awareness activities the learner is the recipient of information whereas the learner in a training environment has a more active role, training being more formal with a goal of building knowledge and skills to facilitate job performance. Section 2.3, Training, puts the difference plainly: training seeks to teach skills, which allow a person to perform a specific function, while awareness seeks to focus an individual's attention on an issue or set of issues. An activity delivered to the whole company can therefore be either one. The third element, physical access control, limits who can reach equipment: RFC 2196, the Site Security Handbook, advises in section 4.5.1, Physical Access, restricting physical access to hosts, allowing access only to those people who are supposed to use them, and names wiring closets and routers among the areas where physical access should be restricted.
↗ Cisco 200-301 CCNA v1.1 Exam Topics — Section 5: Security Fundamentals
5/10 · IP Services
A packet capture is taken while a laptop boots and a user then opens an internal web application. The capture contains DHCPDISCOVER, DHCPOFFER, DHCPREQUEST and DHCPACK, then one query for app.example.internal sent to 10.1.1.53, then TCP traffic to 10.1.9.40. The laptop had no configuration of its own beforehand. Which statement describes the division of work between the two services here?
ADHCP delivered the address, mask and gateway; the laptop found a name server by broadcasting for one.
BDHCP delivered the address, mask and gateway; the gateway relayed the laptop's name query to a server.
CDHCP delivered the address, mask, gateway and name server; the name server returned 10.1.9.40.
DDHCP delivered the address, mask, gateway and name server, and it also supplied the 10.1.9.40 record.
Show answer & explanation
C is correct. Topic 4.3. RFC 2131 defines the four-message allocation exchange: the client broadcasts DHCPDISCOVER, servers answer with DHCPOFFER, the client broadcasts DHCPREQUEST to accept one offer, and the chosen server replies with DHCPACK, which carries the lease and its options. Those options are how a client that started with nothing also learns its mask, its default gateway and the addresses of the name servers it is to query; the capture cannot show that, because the parameters travel inside the DHCP messages rather than as separate exchanges. Resolution is a separate, later step with a separate server: the client asks the name server it was given for the address behind app.example.internal, receives an address record, and only then opens a TCP session. The practical read is that a client with an address but no name resolution has a problem with the second service, not the first.
↗ Cisco 200-301 CCNA v1.1 Exam Topics — Section 4: IP Services
6/10 · Automation and Programmability
A network assurance platform reports that wireless onboarding times at one site are abnormal this morning, although they are well inside the fixed thresholds the team had configured previously. Which machine learning behavior explains the finding?
AIt compared this morning's values with a pattern of normal behavior learned from this site's own history.
BIt compared this morning's values with the median of sites of similar size in the installed base.
CIt compared this morning's values with a fixed week-earlier reference chosen when the site was built.
DIt compared this morning's values with a synthetic onboarding test run from a test radio at the site.
Show answer & explanation
A is correct. Topic 6.4. Cisco describes AI network analytics as an application that uses machine learning and machine reasoning to provide insight, and defines baselining as a method used to analyze network dynamics to extract behavioral patterns that help define what is the normal (baseline) behavior for that specific network; actual performance is then compared with that baseline using machine learning. Because the baseline is learned per network and adapts as the network evolves, a value can be inside a hand-set threshold and still be an anomaly for that site. The same family of features covers trend deviation and root-cause style advisories, which is the predictive side of the topic.
↗ Cisco 200-301 CCNA v1.1 Exam Topics — Section 6: Automation and Programmability
7/10 · IP Connectivity
A branch router runs IP routing and reaches the Internet through one upstream device at 203.0.113.1 on its Ethernet WAN interface. Which command installs a default route so that traffic for any destination the router does not know is sent to that upstream device?
Aip default-gateway 203.0.113.1
Bip default-network 203.0.113.0
Cip route 203.0.113.1 255.255.255.255 Gi0/1
Dip route 0.0.0.0 0.0.0.0 203.0.113.1
Show answer & explanation
D is correct. Topic 3.3.a and 3.1.g. Cisco documents that a static route configured with the command ip route 0.0.0.0 0.0.0.0 is a way to set the gateway of last resort on a router, that it requires IP routing to be enabled, and that it takes precedence over ip default-network when both are configured. The ip default-gateway command is for a device that is not routing, such as a Layer 2 switch or a router in boot mode. The resulting entry appears as S* 0.0.0.0/0 [1/0] via 203.0.113.1, with the asterisk marking the candidate default.
↗ Cisco 200-301 CCNA v1.1 Exam Topics — Section 3: IP Connectivity
8/10 · Network Fundamentals
An enterprise is renumbering its internal networks and may use only address space that is reserved for private internets, so that no registration is needed and the addresses are never routed on the public Internet. Which address falls inside that reserved space?
A172.32.5.10
B192.169.10.5
C172.15.200.4
D10.250.0.1
Show answer & explanation
D is correct. Topic 1.7. RFC 1918 reserves three blocks for private internets: 10.0.0.0 to 10.255.255.255 (10.0.0.0/8), 172.16.0.0 to 172.31.255.255 (172.16.0.0/12) and 192.168.0.0 to 192.168.255.255 (192.168.0.0/16). The two common traps are extending the second block past 172.31 and reading 192.169 as part of the third block; neither address is private, and routers on the public Internet will carry them to whoever owns them.
↗ Cisco 200-301 CCNA v1.1 Exam Topics — Section 1: Network Fundamentals
9/10 · IP Connectivity · hard
A regional router reaches eight branch LANs through the same next hop, 10.9.9.1: 172.16.16.0/24, 172.16.17.0/24, 172.16.18.0/24, 172.16.19.0/24, 172.16.20.0/24, 172.16.21.0/24, 172.16.22.0/24 and 172.16.23.0/24. No other 172.16.0.0 network may be pulled toward that next hop. Which single static route replaces the eight entries?
Aip route 172.16.16.0 255.255.252.0 10.9.9.1
Bip route 172.16.0.0 255.255.248.0 10.9.9.1
Cip route 172.16.16.0 255.255.240.0 10.9.9.1
Dip route 172.16.16.0 255.255.248.0 10.9.9.1
Show answer & explanation
D is correct. Topic 3.3.b. Summarizing eight consecutive /24 networks needs three bits borrowed back: 8 = 2^3, so the summary is a /24 minus 3 bits, that is a /21, whose mask is 255.255.248.0. Checking the boundary is the essential step: in the third octet, 248 is binary 11111000, so blocks start every 8 values at 0, 8, 16, 24, and a block that starts at 16 runs to 23. That makes 172.16.16.0/21 span 172.16.16.0 to 172.16.23.255, exactly the eight LANs and nothing more. A /20 would reach 172.16.31.255 and over-summarize, while a /22 would stop at 172.16.19.255 and leave four LANs unrouted.
↗ Cisco 200-301 CCNA v1.1 Exam Topics — Section 3: IP Connectivity
10/10 · IP Connectivity · hard
R1 has all of these entries installed:
S 192.168.32.0/19 [1/0] via 10.0.0.1
O 192.168.32.0/24 [110/10] via 10.0.0.2, 00:09:31, GigabitEthernet0/1
D 192.168.32.0/26 [90/28160] via 10.0.0.3, 00:44:02, GigabitEthernet0/2
S* 0.0.0.0/0 [1/0] via 10.0.0.9
Which next hop does R1 use for a packet destined to 192.168.32.70?
A10.0.0.3, the next hop of the EIGRP /26 entry in the table
B10.0.0.1, the next hop of the static /19 entry in the table
C10.0.0.9, the next hop of the default route in the table
D10.0.0.2, the next hop of the OSPF /24 entry in the table
Show answer & explanation
D is correct. Topic 3.2.a. Cisco states that longer prefixes are always preferred over shorter ones when forwarding a packet, and illustrates the rule with three routes to 192.168.32.0 at /26, /24 and /19. Here the arithmetic decides which entries are even candidates: the /26 spans 192.168.32.0 to 192.168.32.63 (block size 2^6 = 64), so the destination .70 is outside it; the /24 spans .0 to .255 and the /19 spans 192.168.32.0 to 192.168.63.255, so both contain .70. Between them the /24 is longer and wins, and neither administrative distance nor metric is consulted, because those compare only routes with the same prefix and length.
↗ Cisco 200-301 CCNA v1.1 Exam Topics — Section 3: IP Connectivity
Practice by knowledge area
Five more free questions for each section of the 200-301 CCNA bank, drawn from that area only, with the answer explained and linked to the source:
Covering every exam domains
The bank spans the whole 200-301 CCNA blueprint, weighted toward what the exam tests most:
Start practising 200-301 CCNA free
6 free questions in study mode · no card · full 200-301 CCNA bank: $15 one-time · no dumps, no ads.
Start 200-301 CCNA free →
200-301 CCNA practice — FAQ
Should I take 200-301 CCNA now or wait for CCNA v2.0?
Take it now if you can be ready before February 2027. Cisco announced v2.0 for February 3, 2027; the v1.1 exam stays live until the cutover and the certification is valid for three years either way. Most of the syllabus — subnetting, switching, OSPF, security fundamentals — carries over.
Does 200-301 CCNA have hands-on simulations?
Yes — alongside multiple choice, the exam includes simulations and simlets where you configure or troubleshoot devices in a terminal. ExamDeck covers the same commands and show output as text-based questions; practise the typing itself in Packet Tracer or Cisco Modeling Labs.
Is 200-301 CCNA still worth it with cloud networking?
Yes — CCNA appears in more networking job postings than any other associate credential, and v2.0 adds AI in network operations rather than removing the fundamentals. Cloud networking (VPCs, transit gateways) assumes exactly the IP, routing and security knowledge CCNA tests.
How many questions is the 200-301 CCNA exam and how long is it?
120 minutes at a Pearson VUE test centre or online, in English or Japanese.
What is the passing score for 200-301 CCNA?
Cisco does not publish a numeric cut score — results are pass/fail with per-area performance indicators. Aim for a consistent 80–85% on realistic mocks before booking.
What is the 200-301 CCNA pass rate?
Cisco does not publish official pass rates, so any exact percentage quoted online is unverified. The readiness signal that actually predicts passing: consistently holding 80–85% on realistic, full-length practice exams before you book.
What are the 200-301 CCNA eligibility requirements?
No prerequisites — Cisco requires no prior certification or course to sit 200-301. Cisco recommends one or more years of experience implementing and administering Cisco solutions, basic IP addressing knowledge and a good understanding of network fundamentals.
How much does 200-301 CCNA cost?
The exam fee is $300 USD, or the equivalent in Cisco Learning Credits (verify on cisco.com; prices differ by country). A failed attempt can be retaken after 5 calendar days at full price.
How long should I study for 200-301 CCNA?
For most candidates, commonly reported 100–150 hours including hands-on lab time in Packet Tracer or CML (Cisco publishes no official figure). What matters most is practising questions and analysing why each option is right or wrong — not just reading.
Does the 200-301 CCNA certification need recertification?
valid for 3 years; renew by passing any Associate-level or higher Cisco exam, or by earning 30 Continuing Education credits within the three-year cycle.
Are ExamDeck's 200-301 CCNA questions exam dumps?
No — every question is original, written to test the concepts and reviewed before it ships, with an explanation linked to the source for every option. Dumps are stale, often wrong, and against Cisco's policies.
ExamDeck is an independent study tool, not affiliated with, endorsed by, or sponsored by Cisco. 200-301 CCNA and related marks are trademarks of their respective owners, used for identification only. Exam facts checked against official Cisco materials (as of September 2026); always confirm current details with the vendor before booking.