Drag and drop the port configuration commands/technologies on the left to their corresponding descriptions on the right.
Drag a concept onto its matching description — or click a concept then click the description.
Configures the port as a non-trunking access port
Limits the number of MAC addresses on a desktop access port
Separates VoIP traffic into a dedicated VLAN
Assigns the data VLAN for desktop or AP devices
Immediately transitions an end-device port to forwarding state
Macro that sets portfast, mode access, and port-security for IoT/virtual hosts
⚠ Common exam trap
Candidates often confuse commands that set port mode (access/trunk) with commands that assign VLANs or set encapsulation. Remember that 'switchport mode access' is the specific command to make a port an access port; other commands like 'switchport access vlan' or 'switchport trunk encapsulation' serve different purposes and do not change the port mode.
Answer choices
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
switchport mode access: Sets the interface as a nontrunking access port
These are common Cisco IOS commands used for port configuration, each with a specific function.
Answer analysis
For each option: why learners choose it and why it is or isn't the right answer here.
switchport mode access: Sets the interface as a nontrunking access port
Why this is correct
This command sets the interface as a nontrunking access port, belonging to a single VLAN. It is used to configure a port to operate in access mode, where it carries traffic for only one VLAN.
switchport trunk allowed vlan: Specifies which VLANs are allowed on a trunk link
Why this is correct
This command restricts the set of VLANs that are allowed to travel across an 802.1Q trunk link by specifying a VLAN list after the keyword allowed. It reduces unnecessary broadcast traffic by preventing VLANs from crossing a trunk where they are not needed; for instance, switchport trunk allowed vlan 10,20 removes all other VLANs from that trunk. Note that the native VLAN must be explicitly included in the allowed list, and this command does not affect the switchport mode, which must be trunk for it to take effect.
switchport port-security: Enables port security on an interface
Why this is correct
This command enables port security, a Layer 2 protection that restricts which source MAC addresses are permitted to send frames on the interface. After enabling it, you configure a maximum number of secure MAC addresses (default 1) and a violation mode (shutdown, restrict, or protect); any frame with an unknown MAC address triggers the configured action. For example, switchport port-security maximum 5 allows only five unique source MAC addresses to use the port.
spanning-tree portfast: Enables PortFast on an access port to bypass listening/learning states
Why this is correct
This command configures PortFast, which makes an access port connected to a single workstation or server skip the Spanning Tree Protocol listening and learning states and immediately enter forwarding. Without it, a host must wait up to 30 seconds for STP convergence, causing DHCP timeouts or boot delays. PortFast should never be enabled on ports connected to other switches, because doing so can create Layer 2 loops.
Go deeper
About these practice questions
This 200-301 question is part of Courseiva's 1,389-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 200-301 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-301 exam.