CCNA Switching and Network Access Practice Question
A wireless client joins the correct SSID and gets an address in the correct employee subnet, but cannot reach only one internal application while everything else works. Which troubleshooting area is the strongest first target?
⚠ Common exam trap
Avoid restarting troubleshooting from basic connectivity steps when the problem is isolated to a specific application.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The path or policy specific to that application, since general employee connectivity already works.
The strongest first target is the application path or policy specific to that application because the client already has general connectivity: it joined the correct SSID, authenticated, and obtained an IP address in the employee subnet. A failure limited to one internal application indicates that basic WLAN join, DHCP, and overall routing are working; therefore, ACLs, firewall rules, DNS resolution for that service, or application-specific policies are the likely cause. Option B (SSID broadcast setting) is irrelevant because the client successfully joined the SSID and has connectivity. Option C (voice VLAN on the wired access port) is not a first target because the symptom involves a single data application, not voice, and the client is on the employee subnet, not a voice VLAN. Option D (OSPF router ID on the client) is invalid because client devices do not typically run OSPF; OSPF runs on routers, not wireless clients.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
The path or policy specific to that application, since general employee connectivity already works.
Why this is correct
The client has already associated to the correct SSID, authenticated, and received a valid IP address from the expected subnet, proving that the WLAN and general network path are functional. Since other employees can connect and general connectivity works, the failure is isolated to application-specific transport, such as traffic filtering rules, access control lists, firewall policies, or per-application VPN/proxy configurations. Therefore, troubleshooting should focus on the path and policies that govern that particular application.
- ✗
The SSID broadcast setting, because the client must not be joined correctly.
Why it's wrong here
The SSID broadcast setting only controls whether the network name appears in probe responses, not whether an already-associated client can send or receive traffic. Because the client successfully joined and pulled an address from the correct subnet, it is not a join failure. If broadcast were disabled, the client would still be able to connect if it manually knew the SSID, and would not explain an application-specific issue.
When this WOULD be correct
In a different scenario where a client cannot connect to any SSID and fails to obtain an IP address, a question might ask about connectivity issues. In that case, troubleshooting the SSID broadcast setting would be appropriate to ensure the client can see and join the network.
- ✗
The voice VLAN on the wired access port connected to the AP uplink.
Why it's wrong here
The voice VLAN on the wired access port is used to separate VoIP traffic from data traffic on the wired infrastructure, and it does not affect how a wireless client forwards traffic after joining a WLAN. A client that has already received an address from the correct subnet is clearly operating on the data VLAN, not the voice VLAN, and general employee access works correctly. Since the problem is restricted to one application, changing the voice VLAN setting on the AP uplink would have no bearing on this scenario.
When this WOULD be correct
If the question stated that multiple applications were inaccessible or that the client was experiencing issues with general network connectivity, then investigating the voice VLAN on the wired access port could be relevant. This would indicate a broader network issue affecting multiple services.
- ✗
The OSPF router ID on the client device.
Why it's wrong here
OSPF router IDs are used by routers participating in OSPF to identify themselves in link-state advertisements; end-client devices such as laptops or phones do not run OSPF and never exchange routing protocol information with the network. A client's network stack obtains an address via DHCP and uses a default gateway for off-subnet traffic, so OSPF router ID is irrelevant. The application-specific failure cannot be caused by a parameter that does not exist on the client device.
When this WOULD be correct
In a different question, if a client device is unable to communicate with any network resources and the issue is suspected to be related to routing, asking about the OSPF router ID could be relevant. For instance, if the question states that the client is on a subnet that should be reachable but isn't, then the OSPF configuration could be the focus.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The 200-301 exam frequently reuses these exact scenarios with slightly different constraints.
✓The path or policy specific to that application, since general employee connectivity already works.Correct answer▾
Why this is correct
The client has already associated to the correct SSID, authenticated, and received a valid IP address from the expected subnet, proving that the WLAN and general network path are functional. Since other employees can connect and general connectivity works, the failure is isolated to application-specific transport, such as traffic filtering rules, access control lists, firewall policies, or per-application VPN/proxy configurations. Therefore, troubleshooting should focus on the path and policies that govern that particular application.
✗The SSID broadcast setting, because the client must not be joined correctly.Wrong answer — click to see why▾
Why this is wrong here
The client has already joined the correct SSID, authenticated, and received an IP address in the correct subnet, so the SSID broadcast setting is not the issue. The problem is specific to one application, not general connectivity.
★ When this WOULD be the correct answer
In a different scenario where a client cannot connect to any SSID and fails to obtain an IP address, a question might ask about connectivity issues. In that case, troubleshooting the SSID broadcast setting would be appropriate to ensure the client can see and join the network.
Why candidates choose this
Students might think that SSID broadcast issues could cause partial connectivity, but the client's successful association and IP address assignment rule out this possibility.
✗The voice VLAN on the wired access port connected to the AP uplink.Wrong answer — click to see why▾
Why this is wrong here
The voice VLAN on the AP uplink is used for VoIP traffic, not for general data applications. Since the client can access other internal resources, the issue is not related to the AP uplink configuration.
★ When this WOULD be the correct answer
If the question stated that multiple applications were inaccessible or that the client was experiencing issues with general network connectivity, then investigating the voice VLAN on the wired access port could be relevant. This would indicate a broader network issue affecting multiple services.
Why candidates choose this
A test-taker might confuse the voice VLAN with general data VLANs or think that AP uplink issues could affect specific applications, but the symptom of single-application failure points elsewhere.
✗The OSPF router ID on the client device.Wrong answer — click to see why▾
Why this is wrong here
OSPF router IDs are used by routers in OSPF routing, not by end-client devices. Clients do not run OSPF, so this is irrelevant to the problem.
★ When this WOULD be the correct answer
In a different question, if a client device is unable to communicate with any network resources and the issue is suspected to be related to routing, asking about the OSPF router ID could be relevant. For instance, if the question states that the client is on a subnet that should be reachable but isn't, then the OSPF configuration could be the focus.
Why candidates choose this
Students might mistakenly think that OSPF is involved in internal application connectivity, but OSPF is a routing protocol for routers, not for client devices.
Analysis generated from the official 200-301blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Visual reference
Quick reference
Routing Protocol Comparison
| Protocol | Metric | Max Hops | Algorithm | Type |
|---|---|---|---|---|
| RIP v2 | Hop count | 15 | Bellman-Ford | Distance vector |
| OSPF | Cost (bandwidth) | Unlimited | Dijkstra (SPF) | Link state |
| EIGRP | Composite metric | Unlimited | DUAL | Hybrid |
| IS-IS | Cost | Unlimited | Dijkstra | Link state |
| BGP | Policy / attributes | Unlimited | Path vector | Path vector |
RIP's 15-hop limit makes it unsuitable for large networks. OSPF and EIGRP dominate modern enterprise deployments.
Go deeper
Related to this question
Learn chapter
Interpreting Packet Capture Output for Layer 2/3 Troubleshooting
Key term
DNS
DNS is the system that translates human-friendly domain names like example.com into machine-readable IP addresses so computers can find each other on a network.
Key term
OSPF
OSPF is a link-state routing protocol used to find the best path for data packets to travel across IP networks, like a smart GPS that recalculates routes when traffic changes.
About these practice questions
This 200-301 question is part of Courseiva's 1,389-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 200-301 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-301 exam.