Drag and drop the switch port configuration commands on the left to the correct descriptions on the right.
Drag a concept onto its matching description — or click a concept then click the description.
Statically configures the port as an access port
Sets the data VLAN for an access port
Assigns the VLAN for IP phone voice traffic
Permanently sets the interface as a trunk port
Restricts which VLANs traverse the trunk
Answer choices
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
switchport mode access: Statically sets the port as an access port.
The command 'switchport mode access' statically sets the port as an access port. 'switchport access vlan 10' assigns VLAN 10 as the data VLAN for connected devices. 'switchport voice vlan 20' defines the VLAN used by a Cisco IP phone for voice traffic. 'switchport mode trunk' forces the port into permanent trunking mode. 'switchport trunk allowed vlan 100,200' restricts the trunk to carry only VLANs 100 and 200.
Answer analysis
For each option: why learners choose it and why it is or isn't the right answer here.
switchport mode access: Statically sets the port as an access port.
Why this is correct
The 'switchport mode access' command is an interface-level configuration that explicitly disables Dynamic Trunking Protocol (DTP) negotiations and forces the port to operate as an access port. This ensures the port carries traffic for only a single data VLAN, defined by the 'switchport access vlan' command, and is the correct foundation for connecting an end device such as a PC or IP phone in a simple access layer. Without this command, a port could inadvertently negotiate a trunk with a neighboring device, creating a security risk by exposing multiple VLANs.
switchport access vlan 10: Assigns VLAN 10 as the data VLAN for connected devices.
Why this is correct
The 'switchport access vlan 10' command assigns VLAN 10 as the data VLAN for the port when it is operating in access mode. Any untagged frames received on the port are placed into VLAN 10, isolating data traffic from other VLANs and network segments. This command does not affect voice traffic; a Cisco IP phone can still send tagged frames on a separate voice VLAN, while the PC behind the phone sends untagged frames that are placed into VLAN 10. It is a fundamental step in segmenting user data from management or voice traffic.
switchport voice vlan 20: Defines the VLAN used by a Cisco IP phone for voice traffic.
Why this is correct
The 'switchport voice vlan 20' command designates VLAN 20 for voice traffic generated by a Cisco IP phone connected to the access port. Upon detecting a phone via CDP, the switch instructs the phone to tag its voice frames with VLAN 20, allowing both data and voice to share the same physical link without interference. The data traffic from the PC remains untagged and belongs to the access VLAN (e.g., VLAN 10), while voice traffic uses 802.1Q tagging to traverse the trunk-like connection to the phone. This command is essential for a converged network where QoS and separate VLANs for voice are required.
switchport mode trunk: Restricts the trunk to carry only VLANs 100 and 200.
Why it's wrong here
This statement is incorrect because the 'switchport mode trunk' command forces the port into a permanent trunking state, but it does not restrict the trunk to carry only specific VLANs. By default, a trunk port carries all active VLANs unless you explicitly use the 'switchport trunk allowed vlan' command to limit the allowed VLAN list. The description matches the behavior of 'switchport trunk allowed vlan 100,200', not the mode command itself. Additionally, forcing a port to trunk when connecting to an access device could expose the device to frames from multiple VLANs, posing a security threat.
switchport trunk allowed vlan 100,200: Forces the port into permanent trunking mode.
Why it's wrong here
This statement is incorrect because the 'switchport trunk allowed vlan 100,200' command only defines the list of VLANs permitted to traverse the link; it does not change the port's operational mode to trunking. The port must first be configured as a trunk using 'switchport mode trunk' or allowed to negotiate trunking via DTP for the allowed VLAN list to have any effect. If the port remains in access mode, the allowed VLAN command is ignored or may produce an error, making the description of 'forcing permanent trunking mode' incorrect and actually matching the function of 'switchport mode trunk'.
Visual reference
Go deeper
Learn chapter
Configuring Switch Ports for Desktops, VoIP Phones, APs, IoT, and Virtualized Hosts
Key term
VLAN
A VLAN logically segments a physical network into isolated broadcast domains without requiring separate physical switches.
Key term
Access port
An access port is a switch port that connects to a single end device, like a computer or printer, and carries traffic for only one VLAN.
About these practice questions
This 200-301 question is part of Courseiva's 1,389-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 200-301 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-301 exam.