VLANs are primarily used to:

Segment a LAN into separate broadcast domains

A trunk port on a switch:

Carries traffic for multiple VLANs using 802.1Q tagging

Carries traffic for a single VLAN

Administrative distance is used to:

Choose between routes learned from different sources

NAT is primarily used to:

Allow private addresses to share public IPs

Automatic IP address assignment

Port security on a switch can:

Restrict or shut down a port when a violation occurs

TCP differs from UDP in that TCP:

Is connection-oriented and provides reliable, acknowledged delivery

A switch builds its MAC address table by:

Learning source MAC addresses from incoming frames

EtherChannel is used to:

Bundle multiple physical links into one logical link for bandwidth and redundancy

A host's default gateway is:

The router the host uses to reach networks outside its own subnet

Network Time Protocol (NTP) is used to:

Synchronize clocks across network devices

SNMP is primarily used to:

Monitor and manage network devices

In network security, AAA stands for:

Authentication, Authorization and Accounting

Address, Allocation and Assignment

Availability, Authenticity and Access

DHCP snooping protects a network against:

Rogue DHCP servers handing out false addresses

A key benefit of network automation (for example with Python or Ansible) is:

Consistent, repeatable configuration at scale that reduces manual error

The Domain Name System (DNS) is used to:

Resolve domain names to IP addresses

Are these real CCNA exam questions?

No. These are original study questions written to test understanding. They are not real exam questions, exam dumps, or copied from any provider.

How should I use these practice questions?

Answer each one, read the explanation (including why the wrong options are wrong), and use the per-domain score below to focus your revision on weak areas. Revisit before exam day.

How many questions should I do before the exam?

Enough to score consistently across every domain, alongside full-length practice from official or reputable providers. Understanding why each answer is right matters more than raw volume.

What score means I am ready?

A good signal is consistently scoring around 80% or higher across all domains on questions you have not seen before, and being able to explain why the wrong options are wrong.

Should I use exam dumps?

No. Dumps (real or leaked questions) breach provider policy, can void your certification, and do not build the understanding the exam actually tests.

Practice questions · IT & Cloud

Cisco CCNA (200-301): Practice Questions

intermediate 30 questions

Original practice questions for the Cisco CCNA (200-301), with explanations of why each answer is right and the others wrong. Filter by domain or difficulty. These are concept and scenario checks - not real exam questions.

By The Exam Atlas Editorial Team · Verified 2026-05-31 · ~38 min

Domain Difficulty

Network Fundamentals easy

How many usable host addresses are in a /24 IPv4 subnet?
Network Fundamentals easy

A standard switch primarily operates at which OSI layer?
Network Fundamentals medium

Which is a private (RFC 1918) IPv4 address?
Network Access medium

VLANs are primarily used to:
Network Access medium

A trunk port on a switch:
Network Access medium

Spanning Tree Protocol (STP) prevents:
IP Connectivity medium

OSPF is which type of routing protocol?
IP Connectivity hard

A router learns the same network via OSPF (administrative distance 110) and a static route (AD 1). Which does it install?
IP Connectivity medium

A default route is written as:
IP Connectivity medium

Administrative distance is used to:
IP Services easy

NAT is primarily used to:
IP Services easy

DHCP provides:
Security Fundamentals medium

An access control list (ACL) on a router is used to:
Security Fundamentals medium

Port security on a switch can:
Automation & Programmability medium

REST APIs commonly exchange data in which format?
Automation & Programmability easy

Which are common network-automation tools?
Network Fundamentals easy

Which OSI layer is responsible for logical addressing and routing (IP)?
Network Fundamentals medium

TCP differs from UDP in that TCP:
Network Fundamentals medium

The default subnet mask for a Class C network is:
Network Access medium

The native VLAN on a trunk port carries:
Network Access medium

A switch builds its MAC address table by:
Network Access hard

EtherChannel is used to:
IP Connectivity medium

How many usable host addresses does a /30 subnet provide?
IP Connectivity medium

A host's default gateway is:
IP Services medium

Network Time Protocol (NTP) is used to:
IP Services medium

SNMP is primarily used to:
Security Fundamentals medium

In network security, AAA stands for:
Security Fundamentals medium

DHCP snooping protects a network against:
Automation & Programmability medium

A key benefit of network automation (for example with Python or Ansible) is:
IP Services medium

The Domain Name System (DNS) is used to:

Practice questions FAQ

Are these real CCNA exam questions?: No. These are original study questions written to test understanding. They are not real exam questions, exam dumps, or copied from any provider.
How should I use these practice questions?: Answer each one, read the explanation (including why the wrong options are wrong), and use the per-domain score below to focus your revision on weak areas. Revisit before exam day.
How many questions should I do before the exam?: Enough to score consistently across every domain, alongside full-length practice from official or reputable providers. Understanding why each answer is right matters more than raw volume.
What score means I am ready?: A good signal is consistently scoring around 80% or higher across all domains on questions you have not seen before, and being able to explain why the wrong options are wrong.
Should I use exam dumps?: No. Dumps (real or leaked questions) breach provider policy, can void your certification, and do not build the understanding the exam actually tests.

Sources

Cisco - CCNA ↗