CCNA Switching and Network Access Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✓

  PortFast with BPDU Guard

  Why this is correct

  PortFast immediately moves a switchport from blocking to forwarding, bypassing the STP listening and learning states, which is exactly what an edge host needs to start communicating right away. BPDU Guard then protects that edge port by placing it in errdisable state if any BPDU is received, preventing a rogue switch from forming an unintended loop. Together, these STP edge-port protections both speed up the transition and maintain loop safety for a directly connected host.

• ✗

  NetFlow with SNMP traps

  Why it's wrong here

  NetFlow is a flow-based accounting and telemetry mechanism that samples packet statistics, and SNMP traps are asynchronous alerts pushed to a management station; both are monitoring tools that only observe or report network behavior. Neither modifies Spanning Tree Protocol parameters, changes the STP port state, or provides the loop-prevention guard needed on an edge port. Thus, they are visibility technologies and cannot cause an immediate forwarding transition or protect against BPDUs.

  When this WOULD be correct

  If the exam question asked about monitoring and alerting mechanisms for network traffic and events, a scenario involving the use of NetFlow to collect data and SNMP traps to notify administrators of significant events would make this option correct.

• ✗

  OSPF passive-interface with EUI-64

  Why it's wrong here

  OSPF passive-interface merely stops OSPF hello/advertisement traffic on a link, while EUI-64 is an IPv6 interface-identifier construction method; neither interacts with Spanning Tree Protocol state machines. An access port's transition out of blocking/listening is governed by STP timers or PortFast, not by routing-protocol or address-autoconfiguration settings. Therefore, this combination cannot cause an edge switchport to transition immediately to forwarding.

  When this WOULD be correct

  If the question were about configuring OSPF on a router where the administrator wants to prevent OSPF advertisements on specific interfaces while using EUI-64 addressing for IPv6, this option would be correct. It would focus on controlling OSPF traffic without affecting Layer 2 switch behavior.

• ✗

  WPA3 with CAPWAP

  Why it's wrong here

  WPA3 is an authentication/encryption framework for Wi-Fi clients, and CAPWAP is the control/forwarding protocol used between a wireless LAN controller and access points; both operate at the wireless data plane and are irrelevant to a wired Ethernet switchport. An edge host connected to a switch requires Layer 2 STP edge-port behavior to skip listening/learning, which WPA3 and CAPWAP cannot influence. Additionally, neither feature detects or suppresses BPDUs on a physical switch port.

  When this WOULD be correct

  If the exam question asked about wireless network security configurations and their impact on access point behavior in a CAPWAP environment, then WPA3 could be the correct answer, particularly in scenarios involving secure connections and management of wireless clients.

Option-by-option analysis

Why each answer is right or wrong

Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The 200-301 exam frequently reuses these exact scenarios with slightly different constraints.

Analysis generated from the official 200-301blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”

Go deeper

Related to this question