Quick Answer
The answer is the switchport voice vlan 20 command, paired with the switchport access vlan command for the data VLAN. This is correct because a Cisco IP phone with a PC behind it requires two separate logical networks on a single physical access port: the access VLAN carries untagged data traffic from the attached PC, while the voice VLAN carries tagged voice traffic from the phone, allowing the switch to prioritize voice packets. On the CCNA 200-301 v2 exam, this scenario tests your understanding of the standard campus switchport design for IP telephony, often appearing in a multiple-choice or drag-and-drop question where a common trap is to mistakenly configure the port as a trunk. A reliable memory tip is to remember that the phone tags its own traffic, so the voice VLAN command tells the switch which VLAN ID to expect for those tagged frames, while the PC remains untagged in the access VLAN.
This 200-301 practice question tests your understanding of network services and security. Read the scenario carefully and evaluate each option against the stated constraints before committing to an answer. A key principle to apply: a switchport configured with switchport access vlan assigns untagged data frames to the specified VLAN for PC traffic.. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.
A switch interface connected to a Cisco IP phone with a PC behind it must carry voice and data correctly. Which two switchport commands are appropriate on that access port?
switchport mode trunk
Why wrong: A user-facing phone port is not typically configured as a trunk.
switchport access vlan 10
That assigns the PC data VLAN.
switchport voice vlan 20
That assigns the tagged voice VLAN for the IP phone.
channel-group 1 mode active
Why wrong: EtherChannel is unrelated to a single user edge port.
spanning-tree cost 1
Why wrong: This does not address the phone-plus-PC access-port requirement.
Answer choices
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
switchport access vlan 10
The access VLAN carries the workstation data traffic, and the voice VLAN carries tagged voice traffic for the IP phone. That is the standard campus switchport design for a phone with a PC behind it. The port itself remains an access port, but the two most directly relevant commands here are the access VLAN and voice VLAN assignments.
Key principle: A switchport configured with switchport access vlan assigns untagged data frames to the specified VLAN for PC traffic.
Answer analysis
For each option: why learners choose it and why it is or isn't the right answer here.
switchport mode trunk
Why it's wrong here
A user-facing phone port is not typically configured as a trunk.
When this WOULD be correct
In a scenario where the question specifies a need for a switch port to connect multiple VLANs for devices such as multiple IP phones or a mix of voice and data traffic across different VLANs, 'switchport mode trunk' would be the correct command to enable trunking.
switchport access vlan 10
switchport voice vlan 20
Why this is correct
That assigns the tagged voice VLAN for the IP phone.
Related concept
A switchport configured with switchport access vlan assigns untagged data frames to the specified VLAN for PC traffic.
channel-group 1 mode active
Why it's wrong here
EtherChannel is unrelated to a single user edge port.
When this WOULD be correct
In a different scenario where the question asks about configuring a switch port for an EtherChannel setup that aggregates multiple links for redundancy and increased bandwidth, 'channel-group 1 mode active' would be appropriate to enable LACP (Link Aggregation Control Protocol) for the EtherChannel.
spanning-tree cost 1
Why it's wrong here
This does not address the phone-plus-PC access-port requirement.
When this WOULD be correct
In a scenario where the exam question asks about optimizing Spanning Tree Protocol settings for a specific port, and the focus is on adjusting port costs to influence path selection in a redundant network topology, this command could be correct.
Option-by-option analysis
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The 200-301 exam frequently reuses these exact scenarios with slightly different constraints.
Why this is correct
That assigns the PC data VLAN.
Why this is wrong here
Configuring an access port as a trunk would cause the switch to expect 802.1Q tagging on all frames, but the PC behind the phone typically sends untagged frames. This would break connectivity for the PC unless the phone is configured to tag PC traffic, which is not standard.
★ When this WOULD be the correct answer
In a scenario where the question specifies a need for a switch port to connect multiple VLANs for devices such as multiple IP phones or a mix of voice and data traffic across different VLANs, 'switchport mode trunk' would be the correct command to enable trunking.
Why candidates choose this
Students might think that because the IP phone uses a tagged VLAN, the port must be a trunk. However, Cisco IP phones use a special voice VLAN feature on access ports, not a full trunk.
Why this is wrong here
The channel-group command is used to create an EtherChannel, which bundles multiple physical links into a single logical link. This is not relevant for a single access port connecting to an IP phone and PC, as there is only one physical link.
★ When this WOULD be the correct answer
In a different scenario where the question asks about configuring a switch port for an EtherChannel setup that aggregates multiple links for redundancy and increased bandwidth, 'channel-group 1 mode active' would be appropriate to enable LACP (Link Aggregation Control Protocol) for the EtherChannel.
Why candidates choose this
Students might confuse the need for additional bandwidth or redundancy on a user port, but EtherChannel is typically used on uplinks or server connections, not on edge ports.
Why this is wrong here
The spanning-tree cost command manually sets the STP path cost for a port, which is used for loop prevention. It does not affect VLAN assignment or voice/data separation, so it does not address the requirement of carrying voice and data correctly.
★ When this WOULD be the correct answer
In a scenario where the exam question asks about optimizing Spanning Tree Protocol settings for a specific port, and the focus is on adjusting port costs to influence path selection in a redundant network topology, this command could be correct.
Why candidates choose this
Students might think that adjusting STP cost is necessary for voice traffic to ensure fast convergence, but this is not a standard configuration for IP phone ports. Voice VLAN and QoS are the primary concerns.
Analysis generated from the official 200-301blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Common exam traps
Don't confuse trunk mode with the need for VLAN tagging; access ports can handle both data and voice VLANs without being trunks.
Detailed technical explanation
In Cisco campus networks, when connecting an IP phone with a PC behind it to a switch port, the port must handle both voice and data traffic properly. The switchport access vlan command assigns the untagged VLAN for the PC’s data traffic, ensuring that the workstation’s frames are forwarded in the correct VLAN. The switchport voice vlan command configures a separate VLAN for the IP phone’s voice traffic, which is tagged with 802.1Q frames to separate voice from data logically on the same physical port. The switchport remains in access mode because the PC does not send tagged frames, and the phone inserts tagged voice frames. The switchport voice vlan command enables the switch to accept tagged voice frames on that port and associate them with the voice VLAN, while untagged frames are assigned to the access VLAN. This design supports Quality of Service (QoS) and security by isolating voice traffic from data traffic on the same physical interface. A common exam trap is confusing the need for trunk mode on the port. Although voice VLAN uses tagging, the port itself is not configured as a trunk because the PC behind the phone does not tag frames. The voice VLAN feature allows the switch to handle tagged voice frames without requiring trunk mode, which is reserved for switch-to-switch links or links to routers. Understanding this distinction is critical for correct switchport configuration and passing the CCNA exam.
Key takeaway
A switchport configured with switchport access vlan assigns untagged data frames to the specified VLAN for PC traffic.
Real-world example
A help-desk technician troubleshoots why a newly connected PC cannot reach shared printers on the same floor. The cable is good, the switch port is active, but the PC is in VLAN 20 and the printers are in VLAN 10. The uplink trunk only allows VLAN 10. A trunk being up does not mean every VLAN crosses it.
What to study next
Review a switchport configured with switchport access vlan assigns untagged data frames to the specified VLAN for PC traffic., then practise related 200-301 questions on the same topic to reinforce the concept.
Network Services and Security — study guide chapter
Learn the concepts, then practise the questions
Network Services and Security practice questions
Targeted practice on this topic area only
All 200-301 questions
1,819 questions across all exam domains
CCNA 200-301 v2 study guide
Full concept coverage aligned to exam objectives
200-301 practice test guide
How to use practice tests most effectively before exam day
Related practice questions
Use these pages to review the topic behind this question. This is how one missed question becomes focused revision.
Practise 200-301 questions linked to Network Infrastructure and Connectivity.
Practise 200-301 questions linked to Switching and Network Access.
Practise 200-301 questions linked to IP Routing.
Practise 200-301 questions linked to Network Services and Security.
Practise 200-301 questions linked to AI and Network Operations.
Practise IPv4 subnetting, CIDR, masks, host ranges and subnet selection.
Practise OSPF neighbours, router IDs, metrics, areas and routing-table interpretation.
Practise VLANs, access ports, trunks, allowed VLANs and switching scenarios.
Practise spanning tree, root bridge election, port roles and STP troubleshooting.
Practise LACP, PAgP, port-channel behaviour and bundle requirements.
Practise standard and extended ACLs, permit/deny logic and traffic filtering.
Practise static NAT, dynamic NAT, PAT and inside/outside address translation.
Practice this exam
Short sessions build daily habit. Longer sessions build exam-day stamina. Try a timed session to simulate real conditions.
FAQ
Network Services and Security — This question tests Network Services and Security — A switchport configured with switchport access vlan assigns untagged data frames to the specified VLAN for PC traffic..
The correct answer is: switchport access vlan 10 — The access VLAN carries the workstation data traffic, and the voice VLAN carries tagged voice traffic for the IP phone. That is the standard campus switchport design for a phone with a PC behind it. The port itself remains an access port, but the two most directly relevant commands here are the access VLAN and voice VLAN assignments.
Review a switchport configured with switchport access vlan assigns untagged data frames to the specified VLAN for PC traffic., then practise related 200-301 questions on the same topic to reinforce the concept.
A switchport configured with switchport access vlan assigns untagged data frames to the specified VLAN for PC traffic.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Keep practising
Last reviewed: May 17, 2026
This 200-301 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-301 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.