CCNA Switching and Network Access Practice Question
This 200-301 practice question tests your understanding of switching and network access. This is a configuration task: choose the command set that satisfies every stated requirement. Small differences — like 'secret' vs 'password' or 'transport input ssh' vs 'all' — change whether the answer is correct. A key principle to apply: a switch port configured with `switchport mode access` forwards traffic for exactly one VLAN and disables trunk negotiation protocols.. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.
A switch port connected to an end host should forward traffic for one VLAN only and should not negotiate trunking. Which configuration approach best fits that requirement?
Clue words in this question
Noticing these words before you look at the options changes how you read each choice.
Clue: "best"
Why it matters: Signals that multiple options may be partially correct. Choose the option that most directly solves the exact problem described, not the one that sounds most complete.
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure the interface with `switchport mode access`
The best approach is to configure the interface as an access port. In plain language, this tells the switch that the interface is for a normal endpoint and should belong to one VLAN rather than carry multiple VLANs like a trunk. It also avoids reliance on dynamic trunk negotiation, which is usually unnecessary and potentially confusing for a user-facing connection.
This is a standard access-layer design principle. End hosts such as PCs and printers usually connect to access ports, not trunks. That is why the correct answer is the one centered on explicit access-port behavior.
Key principle: A switch port configured with `switchport mode access` forwards traffic for exactly one VLAN and disables trunk negotiation protocols.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
✓
Configure the interface with `switchport mode access`
Why this is correct
This is correct because access mode is the normal one-VLAN configuration for an end-host port.
Clue confirmation
The clue word "best" in the question point toward this answer.
Related concept
A switch port configured with `switchport mode access` forwards traffic for exactly one VLAN and disables trunk negotiation protocols.
✗
Configure the interface with `switchport mode trunk`
Why it's wrong here
This is wrong because a trunk is intended to carry multiple VLANs.
When this WOULD be correct
In a scenario where the question specifies that a switch port needs to support multiple VLANs for inter-VLAN routing or to connect to another switch that requires trunking, then `switchport mode trunk` would be the correct configuration.
✗
Configure the interface with `switchport mode dynamic desirable`
Why it's wrong here
This is wrong because it still involves trunk negotiation behavior.
When this WOULD be correct
In a scenario where the question specifies that the switch port should support dynamic trunking negotiation to allow for flexibility in VLAN assignments, `switchport mode dynamic desirable` would be the correct answer. This would apply in environments where multiple VLANs are expected and trunking is acceptable.
✗
Configure the interface with `no switchport`
Why it's wrong here
This is wrong because that converts the interface to routed-port behavior on supported devices.
When this WOULD be correct
In a scenario where the question specifies that the switch port should be used for routing between different subnets without VLAN tagging, `no switchport` would be the correct configuration to enable Layer 3 routing functionality on that interface.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The 200-301 exam frequently reuses these exact scenarios with slightly different constraints.
✓Configure the interface with `switchport mode access`Correct answer▾
Why this is correct
This is correct because access mode is the normal one-VLAN configuration for an end-host port.
✗Configure the interface with `switchport mode trunk`Wrong answer — click to see why▾
Why this is wrong here
A trunk port is designed to carry traffic for multiple VLANs between switches, not for a single end host. Using switchport mode trunk on an access port would allow multiple VLANs and enable trunk negotiation, violating the requirement.
★ When this WOULD be the correct answer
In a scenario where the question specifies that a switch port needs to support multiple VLANs for inter-VLAN routing or to connect to another switch that requires trunking, then `switchport mode trunk` would be the correct configuration.
Why candidates choose this
Students may confuse trunking with the ability to carry VLAN traffic, but they might not realize that trunk ports are for inter-switch links, not end-host connections.
✗Configure the interface with `switchport mode dynamic desirable`Wrong answer — click to see why▾
Why this is wrong here
The dynamic desirable mode actively attempts to form a trunk with the connected device using DTP. This allows trunk negotiation, which contradicts the requirement to not negotiate trunking and to forward traffic for only one VLAN.
★ When this WOULD be the correct answer
In a scenario where the question specifies that the switch port should support dynamic trunking negotiation to allow for flexibility in VLAN assignments, `switchport mode dynamic desirable` would be the correct answer. This would apply in environments where multiple VLANs are expected and trunking is acceptable.
Why candidates choose this
Students might think 'dynamic' implies automatic configuration for a single VLAN, but dynamic desirable actually initiates trunk negotiation, making it unsuitable for an end host.
✗Configure the interface with `no switchport`Wrong answer — click to see why▾
Why this is wrong here
The no switchport command converts the Layer 2 switch port into a Layer 3 routed port, which does not operate as a switch port and cannot be assigned to a VLAN. This is used for routing between VLANs, not for connecting an end host to a single VLAN.
★ When this WOULD be the correct answer
In a scenario where the question specifies that the switch port should be used for routing between different subnets without VLAN tagging, `no switchport` would be the correct configuration to enable Layer 3 routing functionality on that interface.
Why candidates choose this
Students may think removing switchport functionality simplifies the port, but they overlook that it changes the port to a routed interface, which is not appropriate for a standard end-host connection.
Analysis generated from the official 200-301blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Common exam traps
Common exam trap: answer the scenario, not the keyword
Avoid confusing trunking features with access port requirements. Remember, end devices typically connect via access ports.
Detailed technical explanation
How to think about this question
In Cisco switching, a switch port connected to an end host is typically configured as an access port. An access port carries traffic for a single VLAN and does not participate in VLAN trunking protocols. This setup ensures that the port forwards frames tagged or untagged for one VLAN only, simplifying traffic management and reducing the risk of VLAN hopping or misconfiguration. Access ports are the default mode for switch ports connected to devices like PCs, printers, or IP phones that do not require multiple VLAN access.
The command `switchport mode access` explicitly sets the interface to access mode, disabling Dynamic Trunking Protocol (DTP) negotiation. This prevents the port from attempting to form a trunk link, which is designed to carry multiple VLANs simultaneously. By contrast, trunk ports use `switchport mode trunk` and allow multiple VLANs to traverse the link, which is unnecessary and potentially insecure for end-host connections. Dynamic modes like `dynamic desirable` enable DTP negotiation, which can unintentionally form trunks if the connected device supports it, causing VLAN leakage or connectivity issues.
A common exam trap is confusing access mode with dynamic trunking modes. Candidates might incorrectly select dynamic desirable or trunk mode, assuming flexibility is better. However, for end hosts, trunking is not only unnecessary but can cause security risks and operational problems. The practical behavior in Cisco switches is that access ports simplify VLAN assignment and reduce complexity, making them the standard for user-facing connections. Understanding this distinction is critical for the CCNA exam and real-world network design.
KKey Concepts to Remember
A switch port configured with `switchport mode access` forwards traffic for exactly one VLAN and disables trunk negotiation protocols.
Dynamic Trunking Protocol (DTP) enables ports to negotiate trunk links, which is inappropriate for end-host connections requiring a single VLAN.
Trunk ports carry multiple VLANs simultaneously and are intended for switch-to-switch or switch-to-router links, not end devices.
Configuring a port with `no switchport` converts it to a routed port, which is used for Layer 3 interfaces, not typical end-host connections.
Access ports prevent VLAN hopping attacks by restricting traffic to a single VLAN and disabling trunk negotiation.
Dynamic desirable mode allows a port to actively negotiate trunking, which can cause unintended trunk formation on end-host ports.
End hosts such as PCs and printers should connect to access ports to ensure predictable VLAN membership and network segmentation.
Explicitly setting a port to access mode avoids reliance on DTP and reduces configuration errors in VLAN assignment.
TExam Day Tips
→Watch for words such as best, first, most likely and least administrative effort.
→Review why wrong options are wrong, not only why the correct option is correct.
Key takeaway
A switch port configured with `switchport mode access` forwards traffic for exactly one VLAN and disables trunk negotiation protocols.
Real-world example
How this comes up in practice
A help-desk technician troubleshoots why a newly connected PC cannot reach shared printers on the same floor. The cable is good, the switch port is active, but the PC is in VLAN 20 and the printers are in VLAN 10. The uplink trunk only allows VLAN 10. A trunk being up does not mean every VLAN crosses it.
Related glossary terms
Concepts from this question explained
These glossary pages explain the core terms tested in this 200-301 question in full detail.
Review a switch port configured with `switchport mode access` forwards traffic for exactly one VLAN and disables trunk negotiation protocols., then practise related 200-301 questions on the same topic to reinforce the concept.
Switching and Network Access — This question tests Switching and Network Access — A switch port configured with `switchport mode access` forwards traffic for exactly one VLAN and disables trunk negotiation protocols..
What is the correct answer to this question?
The correct answer is: Configure the interface with `switchport mode access` — The best approach is to configure the interface as an access port. In plain language, this tells the switch that the interface is for a normal endpoint and should belong to one VLAN rather than carry multiple VLANs like a trunk. It also avoids reliance on dynamic trunk negotiation, which is usually unnecessary and potentially confusing for a user-facing connection.
This is a standard access-layer design principle. End hosts such as PCs and printers usually connect to access ports, not trunks. That is why the correct answer is the one centered on explicit access-port behavior.
What should I do if I get this 200-301 question wrong?
Review a switch port configured with `switchport mode access` forwards traffic for exactly one VLAN and disables trunk negotiation protocols., then practise related 200-301 questions on the same topic to reinforce the concept.
Are there clue words in this question I should notice?
Yes — watch for: "best". Signals that multiple options may be partially correct. Choose the option that most directly solves the exact problem described, not the one that sounds most complete.
What is the key concept behind this question?
A switch port configured with `switchport mode access` forwards traffic for exactly one VLAN and disables trunk negotiation protocols.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
This 200-301 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-301 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.