Drag and drop the VLAN/trunking commands and terms on the left to their correct descriptions or functions on the right.
Drag a concept onto its matching description — or click a concept then click the description.
Enables 802.1Q trunking on a switch interface
Assigns an access port to VLAN 10
VLAN that carries untagged traffic on a trunk link; default is VLAN 1
Changes the native VLAN on a trunk to VLAN 99
Uses subinterfaces on a single router interface to route between VLANs
⚠ Common exam trap
Do not confuse the commands for access and trunk ports. Remember that 'switchport mode access' places the port in access mode, while 'switchport mode trunk' places it in trunk mode. Also, the native VLAN and VLAN 1 are related to trunking and default settings, not to the configuration of an access port.
Answer choices
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
switchport mode trunk: Configures an interface to carry multiple VLANs.
These pairings match common VLAN/trunking commands and terms to their correct descriptions.
Answer analysis
For each option: why learners choose it and why it is or isn't the right answer here.
switchport mode trunk: Configures an interface to carry multiple VLANs.
Why this is correct
The command 'switchport mode trunk' statically configures a Layer 2 interface to operate as an 802.1Q trunk, allowing it to carry traffic for multiple VLANs simultaneously across one link. It actively initiates trunking and, with DTP left in its default state, can form a trunk even when the neighboring port is set to dynamic desirable mode. Trunk ports tag frames for all allowed VLANs except the native VLAN, which stays untagged, so the allowed VLAN list and native VLAN settings must match on both ends to prevent misrouting.
switchport access vlan 10: Assigns an interface to a specific VLAN.
Why this is correct
The interface configuration command 'switchport access vlan 10' statically assigns an access port to a single VLAN, VLAN 10, and frames sent out that port are untagged. This command does not change the port's mode; the port remains an access port only if 'switchport mode access' is also configured, otherwise the VLAN assignment applies only when the port is in access mode. It is intended for connecting end devices such as PCs, printers, or IP phones, where a single untagged VLAN is the expected behavior.
native VLAN: The VLAN that carries untagged traffic on a trunk link.
Why this is correct
On an IEEE 802.1Q trunk link, frames belonging to the native VLAN are transmitted without a VLAN tag, and the receiving switch places any untagged frame into its configured native VLAN. A native VLAN mismatch between the two ends of a trunk can cause traffic from one VLAN to be silently forwarded into a different VLAN, or trigger spanning-tree instabilities. Because native VLAN traffic is always untagged, an attacker could potentially exploit it for VLAN hopping if the native VLAN is left at its default value, making it a key security consideration.
VLAN 1: Default VLAN on Cisco switches; often recommended to change.
Why this is correct
VLAN 1 is the factory-default Ethernet VLAN that exists on every Cisco switch; it cannot be deleted or renamed, and every port initially belongs to it until explicitly reassigned. It also carries Layer 2 control-plane protocols such as CDP, VTP, PAgP, and DTP, which means a malicious device connected to an access port in VLAN 1 could receive or spoof control traffic. Best practice is to move management traffic to a dedicated VLAN and prune VLAN 1 from trunk links to reduce the attack surface and prevent accidental user traffic from riding the default VLAN.
Visual reference
Go deeper
Learn chapter
Interpreting Packet Capture Output for Layer 2/3 Troubleshooting
Key term
VLAN
A VLAN logically segments a physical network into isolated broadcast domains without requiring separate physical switches.
Key term
Functions
A function is a reusable block of code that performs a specific task, taking inputs, processing them, and returning a result, helping to organize and automate IT workflows.
About these practice questions
One of 1,389 original 200-301 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 200-301 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-301 exam.