Cisco CCNA (200-301) Practice Test
Practice stays free. The full Cisco CCNA 200-301 study guide is the material itself, taught start to finish — a downloadable PDF + EPUB you keep.
| Administering body | Cisco Systems Source: Cisco — 200-301 CCNA exam page (Implementing and Administering Cisco Solutions v1.1) |
|---|---|
| Questions | Not published by Cisco What we read and found nothing in: Cisco — 200-301 CCNA exam page (Implementing and Administering Cisco Solutions v1.1) |
| Time limit | 120 minutes |
| Passing score | Not published by Cisco What we read and found nothing in: Cisco — 200-301 CCNA exam page (Implementing and Administering Cisco Solutions v1.1) |
| Fees |
Source: Cisco — 200-301 CCNA exam page (Implementing and Administering Cisco Solutions v1.1) |
| Languages offered | English · Japanese Source: Cisco — 200-301 CCNA exam page (Implementing and Administering Cisco Solutions v1.1) |
Frequently asked questions
How many Cisco CCNA (200-301) practice questions are here?+
A full bank of original Cisco CCNA (200-301) practice questions across the official content areas, weighted like the real exam, with explanations. Free, no signup.
What is the Cisco CCNA (200-301) exam like?+
A multiple-choice exam, 120 minutes. Practice by topic here, then take the full timed mock exam to gauge readiness.
Are these the real exam questions?+
No. Every question is 100% original, written from public primary sources with explanations. We never copy real exam questions or paid prep material.
Can I study in Chinese or Spanish?+
PrepPass practice is in English, 中文 and Español. The official exam is in English — switch the question language to English any time to rehearse the exact terminology you'll see on test day.
Is there a study guide for the Cisco CCNA (200-301)?+
Yes. PrepPass sells Cisco CCNA 200-301 — Complete Study Guide (2026), a PDF + EPUB download, $14.99 one-time; the practice on this page stays free without it. See the study guide →
Sample practice questions
A few real questions from this free bank, with full explanations. Use the practice tool above for the whole set.
- 1. Network Fundamentals
Which layer of the OSI model is responsible for logical addressing and determining the best path to route packets between networks?
- a.Network (Layer 3)
- b.Data Link (Layer 2)
- c.Transport (Layer 4)
- d.Session (Layer 5)
Answer: a
Explanation: The Network layer (Layer 3) handles logical addressing, such as IPv4 and IPv6, and performs routing to select the best path across internetworks. Routers operate at this layer. The Data Link layer uses physical MAC addresses within a single segment, while the Transport layer manages end-to-end delivery.
- 2. IP Connectivity
Using OSPF's default reference bandwidth of 100 Mbps, what is the cost of a 10 Mbps Ethernet link?
- a.1
- b.10
- c.0
- d.100
Answer: b
Explanation: OSPF cost equals the reference bandwidth divided by the interface bandwidth: 100 Mbps / 10 Mbps = 10. A 100 Mbps link would compute to a cost of 1. Because all links at or above 100 Mbps default to cost 1, engineers often raise the reference bandwidth so gigabit and faster links are differentiated.
- 3. Network Fundamentals
Which well-known port number is used by HTTPS?
- a.22
- b.25
- c.80
- d.443
Answer: d
Explanation: HTTPS runs over TCP port 443, encrypting web traffic with TLS. Plain HTTP uses port 80, SSH uses 22, and SMTP uses 25. Memorizing well-known ports helps when writing ACLs and troubleshooting application connectivity.
- 4. Network Access
By default, which VLANs does an 802.1Q trunk carry?
- a.Only VLAN 1
- b.All VLANs (1-4094) unless the allowed list is pruned
- c.Only VLANs explicitly listed under switchport access
- d.Only the native VLAN
Answer: b
Explanation: By default a trunk allows all VLANs (1-4094), tagging every VLAN except the native one. Administrators typically prune the allowed VLAN list to only needed VLANs to limit broadcast flooding and reduce the attack surface.
- 5. Automation & Programmability
What does an HTTP 200 status code indicate in a REST API response?
- a.The request succeeded (OK)
- b.The request was redirected elsewhere
- c.A server-side error occurred
- d.The client sent a malformed, unauthorized request
Answer: a
Explanation: HTTP 200 (OK) means the request succeeded and the response contains the expected data. 2xx codes indicate success, 3xx redirection, 4xx client errors, and 5xx server errors. Reading status codes is essential when working with controller APIs.
- 6. IP Connectivity
By default on a broadcast OSPF segment, after how many seconds without a hello will a router declare its neighbor down?
- a.20 seconds, which is twice the hello interval
- b.120 seconds, giving generous tolerance for transient link flaps
- c.10 seconds, equal to the hello interval itself
- d.40 seconds
Answer: d
Explanation: The default OSPF dead interval on broadcast and point-to-point links is 40 seconds, which is four times the 10-second hello interval. Missing hellos for that entire period causes the neighbor to be declared down and the adjacency to drop. Lowering both timers speeds up failure detection at the cost of more control traffic.
- 7. IP Connectivity
A router's IPv6 routing table shows a route learned via OSPFv3. Which underlying difference distinguishes OSPFv3 from OSPFv2?
- a.OSPFv3 abandons the concept of areas and always runs as a single flat domain
- b.OSPFv3 runs over IPv6, uses link-local addresses for adjacencies, and is enabled per interface
- c.OSPFv3 uses hop count instead of cost as its path-selection metric
- d.OSPFv3 requires TCP connections between neighbors rather than multicast hellos It also swaps its cost metric for a simple hop count to stay compatible with older routers.
Answer: b
Explanation: OSPFv3 carries IPv6 routing information, forms adjacencies using interface link-local addresses, and is commonly enabled directly on interfaces rather than only through network statements. It keeps OSPF's familiar areas, LSAs, and SPF algorithm. OSPFv2 remains IPv4-only, so both may run simultaneously in a dual-stack network.
- 8. Security Fundamentals
Which wildcard mask should an ACL use to match exactly the single host 192.168.10.7?
- a.255.255.255.255, which would match every possible address
- b.255.255.255.0, the standard class C subnet mask
- c.0.0.0.255, which would match the entire 192.168.10.0 subnet
- d.0.0.0.0
Answer: d
Explanation: A wildcard mask of 0.0.0.0 requires every bit of the address to match, so it selects exactly one host, 192.168.10.7. Equivalently, IOS accepts the 'host 192.168.10.7' keyword. A wildcard of 0.0.0.255 would match the whole /24, and 255.255.255.255 (the 'any' keyword) matches everything.
- 9. Network Fundamentals
IPv4 multicast frames are carried in Ethernet frames whose destination MAC begins with which reserved prefix?
- a.01:00:5E
- b.FF:FF:FF
- c.00:00:0C, an OUI historically assigned to Cisco
- d.01:80:C2
Answer: a
Explanation: IPv4 multicast addresses map to Ethernet destination MACs in the 01:00:5E range, with 23 bits of the group address copied into the MAC. STP BPDUs use 01:80:C2, and FF:FF:FF:FF:FF:FF is the Layer 2 broadcast.
- 10. IP Connectivity
What is the primary purpose of Cisco Express Forwarding (CEF)?
- a.It negotiates trunk links between adjacent switches
- b.It runs the shortest-path-first calculation for OSPF
- c.It encrypts routing protocol updates between neighbors
- d.It pre-builds forwarding and adjacency tables for fast hardware-based packet switching
Answer: d
Explanation: CEF builds a Forwarding Information Base and an adjacency table ahead of time so packets are switched in hardware without a route-cache lookup per flow. This yields high, predictable forwarding performance compared with process switching.