Network Access

Which spanning-tree port state listens for BPDUs and participates in STP, but does not learn MAC addresses yet?

What is the main purpose of a VLAN on a switch?

Switch SW1 sends traffic for VLAN 30 across a trunk to SW2, but hosts in VLAN 30 on SW2 cannot communicate with hosts in VLAN 30 on SW1. Other VLANs work across the trunk. Which trunk issue is most likely?

What is a common requirement for interfaces to successfully bundle into an EtherChannel?

In a router-on-a-stick design, what is configured on the physical router interface connected to the switch?

Which two functions are commonly handled by a wireless LAN controller in a controller-based deployment? (Choose two.)

A switch receives a unicast frame for a destination MAC address that is not yet in its MAC address table. What does the switch do?

When spanning tree elects a root bridge, which value is considered first?

What problem does Spanning Tree Protocol solve in a switched network?

Hosts in VLAN 10 need to communicate with hosts in VLAN 20. What is required for that communication to work?

On an 802.1Q trunk, which VLAN is sent untagged by default on many Cisco switches unless changed?

Which two conditions must match on two switch ports before they can successfully form a Layer 2 EtherChannel? (Choose two.)

A non-root switch has two uplinks toward the root bridge. One path has a lower total STP cost than the other. What role will the lower-cost uplink have?

A PC connected to switch port Gi0/10 should be in VLAN 20 but receives broadcasts only from VLAN 1. Which switchport setting is most likely wrong?

Which statement best describes a lightweight access point in a controller-based WLAN?

A switch shows this output: Gi0/1 on 802.1q trunking 1 Gi0/2 auto n-802.1q trunking 1 Which statement is correct?

What is the purpose of Power over Ethernet (PoE)?

Two switches form an EtherChannel. One side is configured with LACP active. Which setting on the other side will successfully negotiate the bundle?

An engineer lowers the spanning-tree path cost on one uplink of a nonroot switch. What is the expected result if all else stays equal?

A trunk link has a native VLAN mismatch between two switches. What is the most likely result?

What does an access port do on a switch?

What is the main purpose of BPDU Guard on a PortFast-enabled access port?

Which spanning-tree port role receives the best BPDU toward the root bridge on a nonroot switch?

A switch displays this output: Port Name Status Vlan Fa0/1 connected 10 Fa0/2 connected 10 Fa0/24 connected trunk Which port should be checked first if a user in VLAN 20 cannot reach the distribution switch over the uplink?

Which two conditions must match for a Layer 2 EtherChannel bundle to form correctly? (Choose two.)

A switch displays the following output: Switch# show interfaces trunk Port Mode Encapsulation Status Native vlan Gi1/0/24 on 802.1q trunking 99 Port Vlans allowed on trunk Gi1/0/24 10,20,30 Port Vlans active in management domain Gi1/0/24 10,20,30,40 Users in VLAN 40 cannot reach resources across this trunk. What is the most likely reason?

A switch administrator enters the following commands on interface GigabitEthernet1/0/10: interface g1/0/10 switchport mode access switchport access vlan 30 spanning-tree portfast spanning-tree bpduguard enable A user connects a small unmanaged switch to this port, and the access port immediately changes to an err-disabled state. Which feature caused the port to shut down?

A network engineer checks EtherChannel status on a switch and sees the following output: Group Port-channel Protocol Ports ------+-------------+---------+----------------------------- 1 Po1(SD) LACP Gi1/0/1(s) Gi1/0/2(I) What is the most likely reason the EtherChannel is not forwarding traffic?

A user connects a small unmanaged switch to an access port, and the port immediately transitions to err-disabled. Which feature most likely caused this behavior?

Clients in VLAN 30 are not receiving addresses from the DHCP server located in VLAN 99. Which configuration change should be made on the Layer 3 interface for VLAN 30?

PCs in VLAN 30 on SwitchA cannot reach servers in VLAN 30 on SwitchB. All other VLANs work across the trunk. What is the most likely cause?

Match each EtherChannel term or state to its most accurate meaning.

Which statement best explains why trunks are needed between switches in a multi-VLAN environment?

A multilayer switch must route traffic between VLAN 10 and VLAN 20. Which condition is required for that to happen?

Why is PortFast typically enabled on switch ports connected to end devices?

A switchport connected to an IP phone and a PC must carry user traffic and voice traffic separately. Which feature is designed for that purpose on a Cisco access port?

A switch port should allow an IP phone and attached PC to operate correctly. The phone should place voice traffic in VLAN 200 while the PC remains in VLAN 20. Which configuration approach best supports that design?

A switch interface connected to another switch must carry VLANs 10, 20, and 30 only. Which command best enforces that requirement on the trunk?

A port connected to an end-user PC should not send or expect VLAN tags from the endpoint. Which interface type is appropriate on the switch?

A trunk between two switches is up, but users in VLAN 40 cannot communicate across it. The output shows both sides allow VLAN 40. What is another likely trunk-related cause to check next?

Match each VLAN-related term to its most accurate meaning.

Match each STP-related feature or term to its most accurate description.

Which command places a switch interface into trunking mode directly instead of relying on negotiation?

A switch trunk is carrying several VLANs, but VLAN 99 traffic is failing. The trunk allowed list includes VLAN 99 on both sides. Which statement best explains why a VLAN can still fail even when it is allowed?

A switchport should automatically disable itself if too many MAC addresses are learned beyond the configured secure limit. Which port-security violation mode causes that behavior?

Match each trunking or switchport term to its most accurate description.

A switchport connected to another switch is configured as an access port by mistake. Which symptom is most likely in a multi-VLAN design?

A Layer 2 switch port connected to an end host should move to forwarding quickly but also shut down if a BPDU is received. Which pair of features best supports that design?

A trunk link between two switches is operational, but one side shows a native VLAN mismatch warning. What is the main concern with that condition?

A multilayer switch has SVIs for VLAN 10 and VLAN 20, but hosts in those VLANs still cannot reach each other. The SVIs are up/up. Which additional condition is most likely required?

Which command places a switch port into access mode directly?

A switch port connected to a user PC is configured as a trunk. The PC cannot communicate normally. What is the best explanation?

A switch interface connects to a user PC and should belong only to VLAN 30. Which command assigns that VLAN after the interface is in access mode?

An EtherChannel should form using LACP between two switches. One side is configured for LACP active, and the other side is configured for LACP active. What is the expected result if the other link settings also match?

Two switches are connected by a trunk. VLAN 50 exists on both switches, but traffic still fails across the link. The allowed VLAN list is correct. Which additional item should be checked next?

A switchport connected to another switch is configured with `switchport mode dynamic auto` on both ends. What is the most likely outcome if neither side actively negotiates trunking?

Two switches should form an LACP EtherChannel. One side is configured passive, and the other side is also passive. What is the most likely result?

A switch port connected to an end host should forward traffic for one VLAN only and should not negotiate trunking. Which configuration approach best fits that requirement?

Match each access-layer feature to its most accurate function.

An administrator wants a switchport connected to an end device to move to forwarding quickly but does not want that setting used on inter-switch links. Which feature is intended for that edge-port behavior?

A switch trunk must carry VLANs 10, 20, and 30, but traffic for VLAN 20 is failing. The trunk allowed list on one side is `10,30`. What is the most likely cause?

A switch port connected to an end host is configured with both PortFast and BPDU Guard. What is the most likely outcome if a small switch is connected there and starts sending BPDUs?

Match each switchport or trunking concept to its most accurate role.

Two switches should form an EtherChannel using LACP. One side is configured active and the other passive. If the port settings otherwise match, what is the expected result?

Match each STP-related term or feature to its most accurate function.

Match each switch security or protection feature to its most accurate purpose.

A switchport connected to another switch should carry VLANs 10, 20, and 30. The interface is operational, but only VLAN 10 works. VLANs 20 and 30 fail. Which explanation is most likely if the port was accidentally configured as an access port in VLAN 10?

A user-facing switchport should carry traffic for only one VLAN and should not attempt DTP trunk negotiation. Which two-command approach best fits that design?

Match each trunk or VLAN term to its most accurate function.

A switchport is configured as a trunk on one side and access on the other side of the same physical link. What is the most likely result?

PCs in VLAN 30 on SwitchA cannot reach PCs in VLAN 30 on SwitchB. VLAN 30 exists on both switches and all other VLANs work across the same link. Based on the exhibit, what is the most likely cause?

A port connected to an end host is configured with PortFast and BPDU Guard. What is the most likely result if a small unmanaged switch is connected and starts sending BPDUs?

A switch interface is configured as `dynamic desirable`, and the peer interface is configured as `dynamic auto`. What is the most likely result?

Match each switching feature to its most accurate purpose.

A switch port connected to a user PC should be placed in VLAN 20 and must not negotiate trunking. Which configuration is the most appropriate?

A switch port connected to an IP phone and a PC should separate voice traffic from data traffic while still using one physical edge connection. Which feature best supports that design?

Two switches are connected by a trunk. VLAN 50 exists on both switches, but hosts in VLAN 50 cannot communicate across the link. All other VLANs work. Based on the exhibit, what is the most likely cause?

A multilayer switch has SVIs for VLAN 10 and VLAN 20. Hosts in both VLANs can reach their local SVI, but they cannot reach each other. Which additional configuration is most likely required?

Match each Layer 2 protection feature to its most accurate purpose.

Two switches should form an EtherChannel with LACP. One side is set to active and the other is set to passive. If the remaining interface settings match, what is the expected result?

Match each trunking term to its most accurate meaning.

Match each switch protection feature to its most accurate purpose.

Two switches are configured for LACP EtherChannel. One side is set to passive and the other side is also set to passive. What is the most likely outcome?

Match each switchport or VLAN term to its most accurate meaning.

A switch port connected to a workstation is configured with sticky MAC learning and a maximum secure MAC count of 1. What is the main operational benefit of sticky learning in this case?

A switchport connected to a user workstation is placed in VLAN 30. The administrator also wants to prevent that port from learning more than one MAC address. Which feature should be configured?

A switchport on one side of a link is configured as a trunk, but the peer side is configured as an access port. What is the most likely result?

Match each VLAN or trunk term to its most accurate purpose.

Match each switchport or STP feature to its most accurate purpose.

Which statement best compares 2.4 GHz and 5 GHz Wi-Fi operation at a basic CCNA level?

Match each wireless concept to its most accurate description.

A switchport on one side of a link is configured as a trunk, but the peer side is configured as an access port. The physical link is up, but VLAN traffic behaves unexpectedly. What is the most likely cause?

What is the primary role of a wireless LAN controller in a controller-based WLAN design?

Which two statements accurately describe WPA2 and WPA3 in wireless security?

An EtherChannel between two switches is configured for LACP. One switch shows the member interfaces as bundled, while the other shows them as individual interfaces. Which explanation is most likely if both sides are using LACP?

Which statement best describes an SSID in a wireless LAN?

Which statement best describes why PortFast is usually appropriate on a user-facing access port but not on a normal switch-to-switch uplink?

Which statement best describes CAPWAP in a controller-based WLAN environment?

A switchport is configured as an access port in VLAN 10, but a user plugs in a small unmanaged switch and connects multiple devices behind it. Which security feature most directly limits that behavior at the switchport?

In a controller-based WLAN, what is the main job of the access point?

Match each wireless term to its most accurate meaning.

Which statement best describes the purpose of a wireless security standard such as WPA2 or WPA3?

A trunk is up between two switches, but traffic for VLAN 40 fails while other VLANs work. Which output item should be checked first?

A switch port connected to an edge host immediately transitions to forwarding and then later goes err-disabled after a BPDU is received. Which feature combination most likely produced this behavior?

Which statement best describes the difference between lightweight APs in a controller-based WLAN and autonomous APs?

What is the main reason a WLAN design might choose a controller-based architecture instead of managing each AP separately?

A multilayer switch has working SVIs for VLAN 10 and VLAN 20, but traffic between the VLANs fails. Hosts can ping their own gateway interfaces. Which misconfiguration is most strongly suggested if the SVIs themselves are correct?

A switch has a root port and an alternate port for the same VLAN. Which statement best explains the operational role of the alternate port?

Which statement best describes why 5 GHz WLAN deployments are often discussed separately from 2.4 GHz deployments?

A user reports that a laptop can connect to the correct SSID but repeatedly fails authentication when joining the WLAN. Which category of issue is most strongly indicated?

A wireless client can see two SSIDs from the same company: Corp and Guest. Which statement best explains what an SSID represents in this situation?

Which two statements accurately describe a controller-based WLAN compared with a set of independently managed APs?

A switch receives superior BPDUs on a port where the design requires that no downstream device ever become the root path for that segment. Which feature is the best fit for that requirement?

Which statement best describes the role of WPA3 in a wireless LAN design?

A controller-based WLAN is deployed across multiple floors. Users can associate to the SSID on both floors, but their experience improves when moving between APs compared with a poorly designed standalone deployment. Which wireless concept is most closely related to that client movement experience?

A switchport connected to another switch should carry multiple VLANs, but it was manually configured as an access port. What is the most likely operational result?

A user on a wireless guest network can associate successfully, obtains an IP address, but cannot reach the Internet. Which troubleshooting area should be examined first if the WLAN itself is working?

An AP broadcasts the correct SSID, but many clients on one floor experience poor performance while the same SSID works well on another floor. Which category of issue is most strongly suggested first?

Which two statements accurately describe good design thinking for wireless guest access?

A port configured for PortFast receives a BPDU and transitions to an error-disabled state. Which statement best explains why this is considered useful protection?

Which two statements accurately describe CAPWAP in a controller-based WLAN context?

An EtherChannel uses LACP. One side is configured correctly, but the peer side has a different switchport mode on one of the member links. What is the most likely result?

Which two statements accurately describe why organizations use separate employee and guest WLANs?

Which statement best explains why guest wireless networks are often isolated from corporate internal networks?

A trunk link between two switches is up, but voice phones connected through one access switch no longer receive the correct voice VLAN treatment. Data users still pass traffic. Which area should be checked first?

Based on the exhibit, what is the most likely reason the port-channel is not forming as expected?

A client can join a corporate SSID and authenticate successfully, but it consistently loses connectivity when moving between floors. Which area is most strongly suggested for deeper investigation?

Match each WLAN or mobility-related term to its most accurate description.

Which statement best describes why wireless clients can have very different experiences on two floors even when they use the same SSID?

A switch port is configured with `switchport voice vlan 150` and `switchport access vlan 20`. Which statement best explains the design purpose?

A switch receives BPDUs on a user-facing port configured as an edge port, but instead of just blocking the port role it fully error-disables it. Which protection feature most likely explains that behavior?

A phone and PC share one switchport. The phone works, but the PC cannot reach its normal data resources. The switchport voice VLAN is configured, and the access VLAN is incorrect. Which explanation is strongest?

A wireless client can associate to the correct corporate SSID and authenticate successfully, but receives an address from the guest network instead of the employee network. Which troubleshooting area is strongest?

Based on the exhibit, which change would most likely restore connectivity for VLAN 40 across the inter-switch link?

Based on the exhibit, what is the most likely reason the EtherChannel bundle is not forming?

Based on the exhibit, why did interface Gi1/0/24 become the root port?

A host on a guest WLAN can browse the Internet but cannot reach internal corporate resources, while employees on another SSID can. Which statement best explains why that can be a correct design outcome?

A phone and PC share one switchport. The phone registers successfully, but the workstation receives an address from the wrong subnet. Which explanation is strongest?

Based on the exhibit, what is the strongest explanation for why VLAN 50 hosts on SW1 cannot reach VLAN 50 hosts on SW2?

Which statement best describes why CAPWAP is relevant in controller-based WLAN troubleshooting?

Based on the exhibit, which command output would be the best next step to verify whether the port-channel is operational after configuration changes?

A client can join a secure employee SSID, but traffic is consistently placed into a guest-style restricted path. Which area should be investigated first?

A wireless client joins the correct SSID and gets an address in the correct employee subnet, but cannot reach only one internal application while everything else works. Which troubleshooting area is the strongest first target?

Based on the exhibit, what is the strongest explanation for why the client cannot obtain a correct address on the employee WLAN?

Based on the exhibit, what is the strongest explanation for why the access port shut down immediately after a small unmanaged switch was connected?

Based on the exhibit, what is the strongest explanation for why one AP never joins the wireless controller while the others do?

Which statement best describes an SSID in wireless networking?

Based on the exhibit, what is the strongest explanation for why Gi0/10 shut down after a hub was connected?

A user can connect to the employee SSID and receive the correct employee IP subnet, but access to one internal application fails only for that WLAN while wired users succeed. Which troubleshooting area is the strongest first focus?

A user joins the employee SSID successfully and can browse internal resources, but VoIP over Wi-Fi calls fail only while roaming between floors. Which troubleshooting area is the strongest first focus?

Based on the exhibit, which action is most likely required to allow AP-22 to join the controller successfully?

Based on the exhibit, what is the strongest reason the switchport went into err-disabled state?

Match each wireless or edge-switch concept to the description that best fits it.

Based on the exhibit, what is the most likely reason users in VLAN 60 on SW2 cannot reach the default gateway on SW1?

A user reports that the corporate SSID is visible and accepts the correct password, but the client always lands in a quarantined remediation network. Which troubleshooting area is strongest?

Exhibit: After a new switch was connected, the access-layer port went into err-disabled state immediately. Which feature most likely caused this?

A switchport is configured as an access port for VLAN 20, but users connected to it cannot reach the default gateway. The switch shows the interface as up/up. Which switch misconfiguration is the most likely cause?

A two-switch EtherChannel bundle is configured with LACP. One side uses active mode on both member links, while the other side uses passive mode on both member links. What is the result?

Exhibit: A switch interface connected to an IP phone and PC is configured as an access port in VLAN 10. The PC works, but the phone does not register. What additional configuration is most likely needed?

Exhibit: Users on SW2 in VLAN 30 can reach local devices but not hosts in VLAN 30 on SW1. What is the most likely reason?

Exhibit: A switch port connected to an end host is stuck in a blocking state much longer than expected after a reboot. Which configuration change most directly speeds host access while still keeping loop protection elsewhere?

Exhibit: A wireless client can see the SSID and associates successfully, but it never gets network access. Other users on the same SSID work. Which issue is the best fit?

Two switches are connected with EtherChannel using LACP. One side is configured with mode active and the other side with mode passive. What happens?

Exhibit: Two switches are connected by an 802.1Q trunk. Hosts in VLAN 30 on opposite sides cannot communicate, but VLAN 10 works. What is the most likely cause?

Exhibit: An access switch shows Gi1/0/10 as err-disabled shortly after an IP phone and a workstation are connected through the same wall jack. What is the most likely cause?

Exhibit: A user reports intermittent connectivity after a new switch was connected to an access port. Which feature would have prevented this by immediately disabling the port when a BPDU was received?

Exhibit: Clients can see the corporate SSID but fail authentication after entering valid usernames and passwords. Which issue is the best explanation?

Why is BPDU Guard commonly enabled on PortFast-enabled access ports?

Exhibit: SW2 receives superior BPDUs on both uplinks. One uplink becomes the root port and the other becomes alternate. Which factor is considered first when SW2 chooses the root port?

Exhibit: SW1 is configured for EtherChannel with LACP, but the bundle does not form. What is the most likely cause?

Which VLAN is used by default for most switch ports on a new Cisco switch?

Which wireless design objective is achieved by using nonoverlapping channels in adjacent cells?

Exhibit: Two switches are connected by an 802.1Q trunk. Hosts in VLAN 30 cannot communicate across the link, but VLAN 10 works. What is the most likely cause?

A switchport should allow only one learned MAC address and shut down if a different device is connected later. Which port security violation mode and limit combination best fits that goal?

Exhibit: SW1 is the root bridge for VLAN 10. A user switch receives a BPDU on an access port connected to a desk-side unmanaged switch. What should happen if BPDU Guard is enabled on that port?

Exhibit: Users report that they can see the corporate SSID but fail authentication immediately after entering credentials. Guest wireless works on the same access point. Which issue is most likely?

Exhibit: A PC connected to SW1 cannot reach the default gateway. The access port is assigned to VLAN 20, but the switch output below is shown. What is the most likely cause?

Exhibit: Users complain of slow wireless performance in a dense office even though signal strength is strong. Multiple APs are using channels 1, 2, and 3 on 2.4 GHz. Which change is most appropriate?

Exhibit: Two switches are bundled with LACP, but only one physical link is forwarding traffic in the port-channel. What is the most likely reason?

Exhibit: Users in VLAN 30 cannot reach devices in other VLANs after a switch replacement. What is the most likely cause?

Exhibit: A phone and a PC are attached to the same switchport. The phone works, but the PC cannot reach the data network. Which switch setting is most likely missing?

Which two STP facts are correct? Choose two.

Match each STP or switch protection feature to the problem it is mainly designed to prevent.

Exhibit: Hosts in VLAN 20 cannot reach their default gateway after a trunk change. Which two findings would directly explain the issue?

Exhibit: A user says the phone connected to a switch port works, but the attached PC does not get network access. What is the most likely switch-side issue?

Exhibit: SW1 and SW2 should form an EtherChannel, but the bundle does not come up. What is the most likely cause?

Which STP port state on a classic 802.1D switch listens for BPDUs and prepares to participate in the topology, but does not yet learn MAC addresses?

An engineer wants rapid transition to forwarding on end-user switchports while still protecting the topology from accidental switch connections. Which two STP-related features fit that design?

A trunk link between two switches is up, but hosts in VLAN 30 on opposite switches cannot communicate. VLAN 10 works across the same trunk. Which two causes are the most likely?

Two switches are connected with an EtherChannel using LACP. The bundle stays down and the physical interfaces show individual links, not a port-channel member state. Which two conditions must match on both sides for the channel to form successfully?

A switch should learn one MAC address on an access port and shut the port down if a second unauthorized device appears. Which two port-security settings support that requirement?