Practise switch scenarios involving SW1, SW2, VLANs, trunk links, allowed VLAN lists and show interfaces trunk output.
Start Scenario PracticeWhich protocol is used to provide dynamic, automatic configuration of VLANs across a domain of switches?
Explanation: VLAN Trunking Protocol (VTP) enables a centralized management of VLAN configurations across a switched network. By creating, deleting, or modifying VLANs on a server switch, those changes are propagated automatically to all client switches in the domain. Understanding VTP is essential for minimizing configuration errors and maintaining consistent VLAN databases in large-scale environments, though modern networks often prefer manual management for improved security control.
Users on VLAN 20 report that they can reach servers on VLAN 30 but cannot reach any hosts on VLAN 40. The administrator confirms that inter-VLAN routing is configured on a Layer 3 switch with switched virtual interfaces for all three VLANs. Which action should the administrator take first to isolate the problem?
Explanation: Because routing between VLAN 20 and VLAN 30 already works, the Layer 3 switch is functioning as a router. The fault is specific to VLAN 40, so the logical first check is whether its switched virtual interface is up and correctly addressed. An SVI stays down when the VLAN has no active member ports or when the VLAN itself has not been created.
Which feature is best suited to prevent VLAN hopping attacks where an attacker sends double-tagged 802.1Q frames to reach a restricted VLAN?
Explanation: VLAN hopping via double-tagging occurs when an attacker sends a frame with two tags to a switch, tricking it into bypassing port restrictions. By explicitly configuring ports as access ports and disabling DTP negotiation, administrators prevent the switch from automatically forming trunks with unauthorized devices. This is a critical hardening step because it removes the possibility of a device negotiating a trunk link, which is required for VLAN hopping to succeed.
A network engineer is configuring a new switch and needs to ensure that management traffic is isolated from user data traffic. The engineer decides to create a separate VLAN for management and assign an IP address to a switch virtual interface (SVI) on that VLAN. Which type of VLAN is being implemented?
Explanation: A management VLAN is dedicated to carrying administrative traffic, allowing network devices to be managed securely without mixing that traffic with user data. By creating such a VLAN and assigning an SVI, the engineer ensures that management access is isolated, which is a best practice for network security and segmentation.
A network administrator must ensure that only specific management stations can reach the management VLAN on a Cisco switch, while ordinary user traffic on other VLANs flows unrestricted. The administrator wants a mechanism that filters traffic based on source IP addresses and can log denied attempts. Which feature should be configured?
Explanation: Filtering by source IP address while leaving other VLANs untouched points to an IP access control list bound to the management switched virtual interface. The list permits only the designated management subnets and denies everything else, and log entries record rejected attempts. Layer 2 protections such as port security, Dynamic ARP Inspection, and BPDU Guard address different threats entirely.
+10 more scenario questions available
Practice all SW1 and SW2 VLAN Trunking Practice QuestionsPractise switch scenarios involving SW1, SW2, VLANs, trunk links, allowed VLAN lists and show interfaces trunk output. These appear throughout the 100-150 and require you to apply your knowledge, not just recall facts.
Cisco doesn't publish an exact breakdown, but scenario-based questions (especially exhibit and command-output formats) make up a significant portion of the 100-150. Practicing each scenario type ensures you're ready for any format.
Yes. Courseiva provides free 100-150 scenario practice across all official exam domains. The platform includes scenario-based questions, command-output interpretation, topic-based practice, mock exams, and readiness tracking — no account required.
Launch a full SW1 and SW2 VLAN Trunking Practice Questions session with instant scoring and detailed explanations.
Start Scenario Practice →