CCNA Switching and Network Access Practice Question
Which TWO statements correctly describe the configuration and behavior of a router-on-a-stick setup for inter-VLAN routing?
⚠ Common exam trap
Test-takers frequently think subinterfaces need a separate 'no shutdown' command, but Cisco tests that the physical interface must be 'no shutdown' and subinterfaces inherit that state, making option D correct.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Each subinterface on the router must be configured with an IP address that belongs to the corresponding VLAN's subnet.
Each subinterface is assigned an IP address in the subnet of its corresponding VLAN, enabling the router to act as the default gateway and route between VLANs using 802.1Q tags. Option D is correct because the physical interface must be 'no shutdown' to pass traffic, and subinterfaces inherit this state; they do not have their own shutdown command. Option B is incorrect because the switch port connecting to the router must be configured as a trunk port, not an access port, to carry multiple VLANs. Option C is incorrect because the native VLAN on the trunk does not have to be the same as the management VLAN; they are separate concepts. Option E is incorrect because the 'encapsulation dot1q <vlan-id> native' command is only needed on the subinterface for the native VLAN to tag or untag frames appropriately; it is not required for all native VLAN configurations (e.g., if the native VLAN is left at default 1, the command may be optional).
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Each subinterface on the router must be configured with an IP address that belongs to the corresponding VLAN's subnet.
Why this is correct
For the router to route traffic for a VLAN, the subinterface must have an IP address in the same subnet as that VLAN. This allows the router to act as the default gateway for hosts in that VLAN.
- ✗
The switch port connecting to the router must be configured as an access port in VLAN 1.
Why it's wrong here
The switch port must be configured as a trunk port to carry multiple VLANs to the router. An access port would only carry a single VLAN, which would not support inter-VLAN routing.
- ✗
The native VLAN on the trunk must be the same VLAN as the one used for management traffic.
Why it's wrong here
While the native VLAN can be used for management, there is no requirement that it must be the management VLAN. The native VLAN is simply the VLAN that carries untagged traffic on the trunk.
- ✓
The router's physical interface must be in 'no shutdown' state, but subinterfaces do not require a separate 'no shutdown' command.
Why this is correct
The physical interface must be administratively up for subinterfaces to function. Subinterfaces inherit the 'no shutdown' state from the physical interface and do not have their own 'no shutdown' command.
- ✗
The router's subinterface for the native VLAN must use the 'encapsulation dot1q <vlan-id> native' command.
Why it's wrong here
The native VLAN traffic is untagged, so the subinterface representing the native VLAN should not use encapsulation. The 'native' keyword is used on the switch, not on the router subinterface.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The 200-301 exam frequently reuses these exact scenarios with slightly different constraints.
✓Each subinterface on the router must be configured with an IP address that belongs to the corresponding VLAN's subnet.Correct answer▾
Why this is correct
For the router to route traffic for a VLAN, the subinterface must have an IP address in the same subnet as that VLAN. This allows the router to act as the default gateway for hosts in that VLAN.
✗The switch port connecting to the router must be configured as an access port in VLAN 1.Wrong answer — click to see why▾
Why this is wrong here
The switch port connecting to the router must be configured as a trunk port, not an access port, to carry traffic for multiple VLANs. An access port would only carry a single VLAN, preventing inter-VLAN routing.
Why candidates choose this
Students might think that the router connects to a specific VLAN, like VLAN 1, and thus the port should be an access port. However, the router needs to receive traffic from all VLANs, which requires a trunk.
✗The native VLAN on the trunk must be the same VLAN as the one used for management traffic.Wrong answer — click to see why▾
Why this is wrong here
There is no requirement that the native VLAN on the trunk must be the management VLAN. The native VLAN is simply the VLAN that carries untagged traffic; it can be any VLAN, and management traffic can be on any VLAN.
Why candidates choose this
Many network administrators use VLAN 1 as both the native VLAN and the management VLAN by default, leading to the misconception that they must be the same. However, this is not a requirement.
✗The router's subinterface for the native VLAN must use the 'encapsulation dot1q <vlan-id> native' command.Wrong answer — click to see why▾
Why this is wrong here
The router subinterface for the native VLAN should not use the 'encapsulation dot1q <vlan-id> native' command because native VLAN traffic is untagged. The 'native' keyword is used on the switch side to specify which VLAN is untagged, not on the router.
Why candidates choose this
Students may confuse the configuration on the router with that on the switch. On the switch, the 'native' keyword is used to define the native VLAN, but on the router, subinterfaces for the native VLAN should not use encapsulation at all, or use 'encapsulation dot1q <vlan-id> native' only if the router needs to tag native VLAN traffic (which is atypical).
Analysis generated from the official 200-301blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Visual reference
Go deeper
Related to this question
Learn chapter
Configuring Switch Ports for Desktops, VoIP Phones, APs, IoT, and Virtualized Hosts
Key term
Inter-VLAN routing
Inter-VLAN routing is the process of forwarding network traffic between different VLANs to enable communication across logically separated broadcast domains.
Key term
Route
A route is a path that data takes through a network from one device or network to another, determined by routing protocols and configured rules.
About these practice questions
One of 1,389 original 200-301 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 200-301 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-301 exam.