200-301 CCNA · Cisco · Network Access · Bank updated 2026-11-03
200-301 CCNA practice questions: Network Access
5 free questions from 28 on this area · answer and explanation for each · no sign-up
These 5 questions come from the Network Access section of our 200-301 CCNA bank (28 questions on this area, which carries 20% of the real exam). Every question is original, with the correct answer explained and linked to the source it is drawn from.
Free: 6 questions in study mode, no card. All 28 Network Access questions and the full 200-301 CCNA bank: $15 one-time.
1/5 · Network Access · easy
A branch office is served by access points that are managed by a controller in the central data center over a WAN link. The business requires wireless clients at the branch to stay associated and to keep reaching local printers even while the WAN link to the controller is down. Which access point mode fits that requirement?
ALeave the access points in local mode
BSwitch the access points over to monitor mode
CSwitch the access points to FlexConnect mode
DSwitch the access points to sniffer mode
Answer: C. Topic 2.6. Cisco documents FlexConnect as the capability of an access point to put wireless client traffic directly on the network at the access point (local switching) instead of centralizing it to the controller, and describes FlexConnect access points as able to switch client data traffic locally and perform client authentication locally when their connection to the controller is lost. That is exactly the branch survivability the requirement asks for. Monitor and sniffer are the non-client-serving modes, and local mode is the default centrally switched mode in which client traffic is carried in the CAPWAP tunnel to the controller.
Source: Cisco 200-301 CCNA v1.1 Exam Topics - Section 2: Network Access
2/5 · Network Access
SW2 runs Rapid PVST+ and shows a stable topology:
SW2# show spanning-tree vlan 20
Interface Role Sts Cost Prio.Nbr Type
---------------- ---- --- --------- -------- ----
Gi1/0/1 Root FWD 4 128.1 P2p
Gi1/0/2 Altn BLK 4 128.2 P2p
Gi1/0/3 Desg FWD 4 128.3 P2p
Which statement describes Gi1/0/2 while the topology stays as shown?
AIt discards data frames, does not learn MAC addresses, and takes over the root role if Gi1/0/1 fails.
BIt discards data frames and keeps learning MAC addresses for as long as it holds the alternate role.
CIt is a backup port for the segment reached by Gi1/0/3 and protects that segment if Gi1/0/3 fails.
DIt was placed in a blocked state by an edge-port protection feature after a BPDU arrived on it.
Answer: A. Topic 2.5.a and 2.5.b. Cisco defines the Rapid PVST+ roles as root (a forwarding port elected for the spanning-tree topology), designated (a forwarding port elected for every switched LAN segment), alternate (a blocked port providing an alternate path to the root bridge) and backup (a blocked port in a loopback configuration). The states map to behavior as follows: discarding or blocking forwards nothing and learns nothing, learning does not forward but does learn addresses, and forwarding does both. So Altn/BLK on Gi1/0/2 means a loop-free standby path toward the root that is ready to be unblocked if the root port fails.
Source: Cisco 200-301 CCNA v1.1 Exam Topics - Section 2: Network Access
3/5 · Network Access · hard
Users in VLAN 20 on SW1 cannot reach VLAN 20 servers behind SW2, although both switches have access ports in VLAN 20 and the uplink between them is trunking.
SW1# show interfaces trunk
Port Mode Encapsulation Status Native vlan
Gi1/0/24 on 802.1q trunking 1
Port Vlans allowed on trunk
Gi1/0/24 1,10,20
Port Vlans allowed and active in management domain
Gi1/0/24 1,10
Port Vlans in spanning tree forwarding state and not pruned
Gi1/0/24 1,10
What does this output show about VLAN 20 on SW1?
ASpanning tree is blocking VLAN 20 on this trunk while the VLAN is allowed and active.
BThe native VLAN value on this trunk differs from the value at the far end of the link.
CVLAN 20 is missing from SW1's own VLAN database, or it is shut down on SW1.
DVLAN 20 was pruned from this trunk by VTP pruning on the far end of the link.
Answer: C. Topic 2.2.a. The show interfaces trunk output is read as three narrowing lists: what the administrator allowed, which of those VLANs are allowed and active (they exist locally and are not shut down), and which of those are in the spanning-tree forwarding state and not pruned. VLAN 20 drops out at the second list, so the fault is on SW1 itself: the VLAN has to be created in the VLAN database (vlan 20) or brought out of shutdown before the trunk can carry it. Allowing a VLAN on a trunk never creates it. By default a trunk allows VLANs 1 to 4094, so appearing in the first list proves nothing about the VLAN existing.
Source: Cisco 200-301 CCNA v1.1 Exam Topics - Section 2: Network Access
4/5 · Network Access · hard
SW1 runs Rapid PVST+ and holds this configuration:
spanning-tree portfast default
!
interface GigabitEthernet1/0/24
switchport mode access
switchport access vlan 10
Gi1/0/24 used to serve a printer. During a move it is re-cabled to a newly installed access switch that also runs Rapid PVST+ and sends BPDUs. Nothing else on SW1 is changed. What does SW1 do with Gi1/0/24 once those BPDUs arrive?
AIt keeps the port in its PortFast state and drops the BPDUs that arrive on it.
BIt moves the port to the error-disabled state and stops forwarding traffic on it.
CIt sets the port's operating state to non-PortFast and lets it join the topology change.
DIt converts the port to a trunk and relays the BPDUs to the other access ports.
Answer: C. Topic 2.5.c. The Catalyst optional spanning-tree features chapter gives the behaviour word for word: even if the interface receives a bridge protocol data unit, spanning tree does not place the port into the blocking state, and spanning tree sets the operating state of the port to non-PortFast even if the configured state remains PortFast edge, and starts participating in the topology change. The configuration line stays in place; what changes is the operational edge status. This is the point PortFast is most often misread on: the same chapter describes PortFast as bringing an access or trunk port straight from blocking to forwarding, bypassing the listening and learning states, and warns that enabling it on an interface connected to a switch or hub could prevent spanning tree from detecting and disabling loops. It is the separate features that change the outcome: BPDU guard puts such a port in the error-disabled state, and BPDU filtering keeps the port from sending or receiving BPDUs at all.
Source: Cisco 200-301 CCNA v1.1 Exam Topics - Section 2: Network Access
5/5 · Network Access · hard
A campus uses lightweight access points in local mode, each joined to a wireless LAN controller over CAPWAP. A laptop scans for networks, joins the corporate SSID, completes 802.1X authentication, and its traffic then reaches servers on the wired network. Which of these functions does the access point itself perform, rather than the controller?
ASending probe responses to the scanning laptop
BDeciding whether to accept the laptop's association
CActing as the 802.1X authenticator for the laptop
DBridging the laptop's frames onto the wired VLAN
Answer: A. Topic 2.6, split-MAC architecture. RFC 5416, the CAPWAP binding for IEEE 802.11, divides the 802.11 MAC between the access point (WTP) and the controller (AC) in section 2.2.1: all real-time IEEE 802.11 services, including the Beacon and Probe Response frames, are handled on the WTP, together with power management, packet buffering and queuing, while all remaining 802.11 MAC management frames are supported on the AC. Its function table places association, disassociation and reassociation, IEEE 802.1X/EAP, RSNA key management and the distribution and integration services on the AC. A client therefore gets its probe answer from the radio it hears, but its association and its authentication are decided centrally.
Source: Cisco 200-301 CCNA v1.1 Exam Topics - Section 2: Network Access; split-MAC function table verified at RFC 5416 section 2.2.1 ('all real-time IEEE 802.11 services, including the Beacon and Probe Response frames, are handled on the WTP'), https://www.rfc-editor.org/rfc/rfc5416
Other 200-301 CCNA areas
The same kind of free sample for every other section of the 200-301 CCNA bank:
Practise 200-301 CCNA with instant feedback
6 free questions in study mode · no card · full 200-301 CCNA bank with area filters and the error log: $15 one-time · no dumps, no ads.
Start 200-301 CCNA free →
ExamDeck is an independent study tool, not affiliated with, endorsed by, or sponsored by Cisco. 200-301 CCNA and related marks are trademarks of their respective owners, used for identification only. Exam facts checked against official Cisco materials (as of November 2026); always confirm current details with the vendor before booking.