Question 1mediummultiple choice
Full question →mediummultiple choiceObjective-mapped
A port connected to an end-user PC should not send or expect VLAN tags from the endpoint. Which interface type is appropriate on the switch?
Answer choices
Why each option matters
Good practice is not just finding the correct option. The wrong answers often show the exact trap the exam wants you to fall into.
A
Best answer
Access port
This is correct because an access port is the normal single-VLAN switchport type for end devices such as PCs.
B
Distractor review
Trunk port
This is wrong because trunks are intended to carry multiple VLANs and use tagging not normally expected from a PC.
C
Distractor review
Routed port
This is wrong because a routed port is a Layer 3 interface, not the usual design for a user PC access connection.
D
Distractor review
Port-channel interface
This is wrong because EtherChannel interfaces are for bundling multiple links.
Common exam trap
Common exam trap: answer the scenario, not the keyword
A frequent exam trap is selecting a trunk port for a PC connection because trunks are associated with VLANs and tagging. Candidates may assume VLAN tagging is always necessary, but trunk ports expect tagged frames from devices, which PCs do not generate. This leads to connectivity issues since the PC sends untagged frames that a trunk port does not properly handle. Remember, trunk ports are designed for switch-to-switch or switch-to-router links carrying multiple VLANs, not for end-user devices. Confusing these port types can cause you to choose the wrong answer despite understanding VLAN concepts.
Technical deep dive
How to think about this question
In Cisco switching, an access port is a Layer 2 interface configured to carry traffic for a single VLAN. It accepts untagged Ethernet frames from connected end devices, such as PCs, and associates all incoming traffic with the configured access VLAN. This design simplifies VLAN management for user devices, which typically do not understand or generate VLAN tags. Access ports strip VLAN tags from outgoing frames and do not expect tags on incoming frames, ensuring compatibility with standard Ethernet endpoints. The decision to configure a switchport as an access port versus a trunk port depends on the connected device type and VLAN requirements. Access ports are appropriate for end-user devices that belong to a single VLAN, while trunk ports carry multiple VLANs simultaneously by tagging frames with IEEE 802.1Q VLAN identifiers. Routed ports differ as they operate at Layer 3, providing IP routing capabilities rather than VLAN switching. Port-channel interfaces aggregate multiple physical links but do not inherently determine VLAN tagging behavior. A common exam trap is confusing access ports with trunk ports due to the association of VLANs with both. Candidates may incorrectly select trunk ports, assuming VLAN tagging is always necessary. However, trunk ports expect and send tagged frames, which end-user PCs do not generate or process. Understanding that access ports handle untagged frames and assign them to a VLAN internally is crucial. Practically, misconfiguring a PC port as a trunk can cause connectivity issues, as the PC will not communicate properly with tagged traffic.
KKey Concepts to Remember
- An access port on a Cisco switch forwards untagged Ethernet frames and associates them with a single VLAN configured on that port.
- Trunk ports carry multiple VLANs by tagging frames with 802.1Q VLAN identifiers and expect tagged frames from connected devices.
- End-user devices like PCs typically do not generate or process VLAN tags, so their switch ports must be configured as access ports.
- Routed ports operate at Layer 3 and provide IP routing functions, making them unsuitable for direct end-user device connections requiring VLAN tagging.
- Port-channel interfaces bundle multiple physical links for increased bandwidth but do not inherently manage VLAN tagging behavior for end devices.
- Configuring a PC-facing switchport as a trunk port can cause connectivity failures because the PC does not handle VLAN tags.
- Access ports simplify VLAN management by internally associating untagged frames with a single VLAN without requiring endpoint VLAN awareness.
- The correct switchport type for connecting an end-user PC is an access port to ensure proper VLAN assignment and untagged frame handling.
TExam Day Tips
- Watch for words such as best, first, most likely and least administrative effort.
- Review why wrong options are wrong, not only why the correct option is correct.
Related practice questions
Related 200-301 practice-question pages
Use these pages to review the topic behind this question. This is how one missed question becomes focused revision.
CCNA subnetting practice questions
Practise IPv4 subnetting, CIDR, masks, host ranges and subnet selection.
CCNA OSPF practice questions
Practise OSPF neighbours, router IDs, metrics, areas and routing-table interpretation.
CCNA VLAN practice questions
Practise VLANs, access ports, trunks, allowed VLANs and switching scenarios.
CCNA STP practice questions
Practise spanning tree, root bridge election, port roles and STP troubleshooting.
CCNA EtherChannel practice questions
Practise LACP, PAgP, port-channel behaviour and bundle requirements.
CCNA ACL practice questions
Practise standard and extended ACLs, permit/deny logic and traffic filtering.
CCNA NAT practice questions
Practise static NAT, dynamic NAT, PAT and inside/outside address translation.
CCNA DHCP practice questions
Practise DHCP scopes, relay, leases and troubleshooting.
CCNA show ip route practice questions
Practise routing-table output, longest-prefix match, AD and route selection.
CCNA show interfaces trunk practice questions
Practise trunk verification and VLAN forwarding across switches.
CCNA wireless security practice questions
Practise WLAN security, authentication and wireless architecture concepts.
CCNA IPv6 practice questions
Practise IPv6 addressing, routes, neighbour discovery and common IPv6 exam traps.
More questions from this exam
Keep practising from the same exam bank, or move into a focused topic page if this question exposed a weak area.
Question 1
A router learns the same prefix from both OSPF and EIGRP. Which route is installed by default?
Question 2
A router shows this output: R1#show ip ospf neighbor Neighbor ID Pri State Dead Time Address Interface 10.1.1.2 1 FULL/DR 00:00:34 192.168.12.2 GigabitEthernet0/0 10.1.1.3 1 2WAY/DROTHER 00:00:39 192.168.12.3 GigabitEthernet0/0 Which statement is correct?
Question 3
What is the OSPF metric called?
Question 4
A non-root switch has two uplinks toward the root bridge. One path has a lower total STP cost than the other. What role will the lower-cost uplink have?
Question 5
A router interface applies this ACL inbound: 10 deny tcp any any eq 80 20 permit ip any any A user reports that web browsing to a server by IP address fails, but ping works. Which statement best explains the behavior?
Question 6
A router learns route 198.51.100.0/24 from OSPF with AD 110 and also has a static route to the same prefix configured with AD 150. Which route is installed?
FAQ
Questions learners often ask
What does this 200-301 question test?
An access port on a Cisco switch forwards untagged Ethernet frames and associates them with a single VLAN configured on that port.
What is the correct answer to this question?
The correct answer is: Access port — The appropriate interface type is an access port. In plain language, a normal user PC is expected to connect to one VLAN and send ordinary untagged Ethernet frames. The switch associates that traffic with the configured access VLAN. This is different from a trunk, which is designed to carry multiple VLANs and commonly uses tagging to preserve VLAN identity across the link. This is one of the most basic but important switching design choices. The correct answer is the switch interface type intended for single-VLAN end-device access.
What should I do if I get this 200-301 question wrong?
Then try more questions from the same exam bank and focus on understanding why the wrong options are tempting.
Discussion
Loading comments…
Sign in to join the discussion.