Drag steps to the numbered slots on the right, or tap a step then tap a slot.
Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4
5Step 5
CCNA Switching and Network Access Practice Question
Drag and drop the following steps into the correct order to configure a switch port for a VoIP phone (voice VLAN + data VLAN), an AP trunk, and a PoE-powered IoT device.
⚠ Common exam trap
The trap is that candidates may enable PoE too early or configure trunks before VLANs exist. Remember: VLANs must be created first, then assigned to ports, and PoE is typically enabled last.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Create VLANs, assign data and voice VLANs to the phone port, configure the AP trunk, enable PoE on the IoT port
First create VLANs, then assign data and voice VLANs to the phone port, configure the AP trunk, and lastly enable PoE on the IoT port.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Create VLANs, assign data and voice VLANs to the phone port, configure the AP trunk, enable PoE on the IoT port
Why this is correct
VLAN creation must precede any VLAN assignment because an interface cannot reference a non-existent VLAN. The phone port is configured with a data VLAN and a voice VLAN, both of which must already exist in the VLAN database. Configuring the AP trunk after the phone port ensures the trunk can carry the created VLANs, and enabling PoE last guarantees that power is applied only after all Layer 2 parameters are in place. This sequence follows Cisco's recommended bottom-up deployment order and minimizes configuration errors.
- ✗
Enable PoE on the IoT port, create VLANs, configure the AP trunk, assign data and voice VLANs to the phone port
Why it's wrong here
Enabling PoE on the IoT port first is the most significant flaw because the interface has not yet been placed into the correct access VLAN, so a powered device could boot into the default VLAN and fail to reach its intended network segment. PoE is a physical-layer power feature, not a Layer 2 feature, so turning it on before creating VLANs and configuring trunks leaves the port active with an incomplete configuration. Additionally, assigning the data and voice VLANs to the phone port after configuring the AP trunk violates the logical dependency that the phone's voice VLAN must exist before the phone is powered and can use it.
- ✗
Create VLANs, enable PoE on the IoT port, assign data and voice VLANs to the phone port, configure the AP trunk
Why it's wrong here
Creating VLANs first is correct, but enabling PoE on the IoT port at step two jumps ahead of the necessary port-level configuration. Once PoE is applied, the IoT device may immediately power up and request an IP address, yet the access port still lacks a specific VLAN assignment, so it will remain in the default VLAN. The phone port and AP trunk must be fully configured before power is delivered, so that the end device boots into the correct VLAN and has network connectivity. Thus, PoE should always be the final action in a port configuration sequence.
- ✗
Configure the AP trunk, create VLANs, assign data and voice VLANs to the phone port, enable PoE on the IoT port
Why it's wrong here
Configuring the AP trunk before creating the VLANs is a fundamental ordering error because a trunk's allowed VLAN list is populated by the VLANs that already exist in the switch's VLAN database; with an empty database, the trunk will carry no intended traffic. When the VLANs are later created, the AP trunk will not automatically update, so the trunk would need to be reconfigured. Similarly, assigning data and voice VLANs to the phone port before those VLANs exist would produce an error, because Cisco IOS rejects references to undefined VLANs. VLAN creation must therefore be the very first step.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The 200-301 exam frequently reuses these exact scenarios with slightly different constraints.
✓Create VLANs, assign data and voice VLANs to the phone port, configure the AP trunk, enable PoE on the IoT portCorrect answer▾
Why this is correct
VLAN creation must precede any VLAN assignment because an interface cannot reference a non-existent VLAN. The phone port is configured with a data VLAN and a voice VLAN, both of which must already exist in the VLAN database. Configuring the AP trunk after the phone port ensures the trunk can carry the created VLANs, and enabling PoE last guarantees that power is applied only after all Layer 2 parameters are in place. This sequence follows Cisco's recommended bottom-up deployment order and minimizes configuration errors.
✗Enable PoE on the IoT port, create VLANs, configure the AP trunk, assign data and voice VLANs to the phone portWrong answer — click to see why▾
Why this is wrong here
PoE configuration does not depend on VLANs, but it is typically done after basic port configuration to avoid misconfiguration.
Why candidates choose this
Candidates might think PoE should be enabled first to ensure power is available before configuring other features.
✗Create VLANs, enable PoE on the IoT port, assign data and voice VLANs to the phone port, configure the AP trunkWrong answer — click to see why▾
Why this is wrong here
The correct sequence is to configure all ports first, then enable PoE as a final step.
Why candidates choose this
Candidates might think PoE is independent and can be done anytime, but best practice is to configure ports first.
✗Configure the AP trunk, create VLANs, assign data and voice VLANs to the phone port, enable PoE on the IoT portWrong answer — click to see why▾
Why this is wrong here
VLANs must exist before they can be used on any port, whether access or trunk.
Why candidates choose this
Candidates might think trunk configuration is independent of VLAN creation, but the trunk will not function correctly without the VLANs existing.
Analysis generated from the official 200-301blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Visual reference
Go deeper
Related to this question
Learn chapter
Configuring Switch Ports for Desktops, VoIP Phones, APs, IoT, and Virtualized Hosts
Key term
VLAN
A VLAN (Virtual Local Area Network) is a logical grouping of network devices that behave as if they are on the same physical network segment, regardless of their actual physical location.
Key term
Voice VLAN
A Voice VLAN is a separate virtual local area network configured on a network switch to carry voice traffic, such as from IP phones, ensuring quality of service and security by isolating it from data traffic.
About these practice questions
Courseiva writes every 200-301 question from scratch — 1,389 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 200-301 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-301 exam.