Match each switching feature to its most accurate purpose.
Drag a concept onto its matching description — or click a concept then click the description.
Speeds an edge port into forwarding state
Disables an edge port if a BPDU is received
Limits and controls MAC address use on a switch port
Helps block rogue DHCP behavior and build trusted bindings
⚠ Common exam trap
Cisco exams often test the specific purpose of each switching feature. Common traps include confusing STP with VTP (loop prevention vs. VLAN management) or misunderstanding Rapid PVST+ as a trunk negotiation protocol. Ensure you can differentiate each feature's role.
Answer choices
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
STP prevents loops, VTP manages VLANs, EtherChannel aggregates links, Port Security restricts MAC addresses, DTP negotiates trunks, and Rapid PVST+ provides fast per-VLAN convergence.
Which accurately pairs each switching feature with its purpose: Spanning Tree Protocol (STP) prevents loops in a switched network by blocking redundant paths; VLAN Trunking Protocol (VTP) manages the addition, deletion, and renaming of VLANs across the network; EtherChannel aggregates multiple physical links into a single logical link for increased bandwidth and redundancy; Port Security limits the number of MAC addresses allowed on a switch port to prevent unauthorized access; Dynamic Trunking Protocol (DTP) automatically negotiates trunking between switches; and Rapid PVST+ provides fast convergence for each VLAN using multiple spanning tree instances. The other options contain incorrect pairings, such as mixing up STP with VLAN management or EtherChannel with loop prevention.
Answer analysis
For each option: why learners choose it and why it is or isn't the right answer here.
STP prevents loops, VTP manages VLANs, EtherChannel aggregates links, Port Security restricts MAC addresses, DTP negotiates trunks, and Rapid PVST+ provides fast per-VLAN convergence.
Why this is correct
This option correctly aligns each switching feature with its documented Cisco IOS purpose: STP runs the 802.1D algorithm to block redundant ports and prevent Layer 2 loops; VTP propagates VLAN configuration changes across a domain; EtherChannel bundles multiple physical links into a single logical link to increase bandwidth; Port Security restricts ingress traffic to configured MAC addresses; DTP negotiates trunking mode between Cisco switches; and Rapid PVST+ runs an RSTP instance per VLAN, enabling fast convergence after a topology change.
STP manages VLANs, VTP prevents loops, EtherChannel restricts MAC addresses, Port Security aggregates links, DTP provides fast per-VLAN convergence, and Rapid PVST+ negotiates trunks.
Why it's wrong here
This option assigns each feature another feature's job: STP is given VLAN management (VTP's role), VTP is given loop prevention (STP's role), EtherChannel is given MAC address restriction (Port Security's role), Port Security is given link aggregation (EtherChannel's role), DTP is given fast per-VLAN convergence (Rapid PVST+), and Rapid PVST+ is given trunk negotiation (DTP). Since none of the features are matched with their actual purpose, the mapping is completely invalid.
When this WOULD be correct
This option would be correct if the question asked to match each feature to its opposite or least accurate purpose, or if the exam intentionally reversed all pairings to test knowledge of incorrect associations.
STP aggregates links, VTP prevents loops, EtherChannel manages VLANs, Port Security negotiates trunks, DTP restricts MAC addresses, and Rapid PVST+ provides fast per-VLAN convergence.
Why it's wrong here
This option mixes up five of the six features: STP is incorrectly said to aggregate links (EtherChannel's role), VTP is incorrectly said to prevent loops (STP's role), EtherChannel is incorrectly said to manage VLANs (VTP's role), Port Security is incorrectly said to negotiate trunks (DTP's role), and DTP is incorrectly said to restrict MAC addresses (Port Security's role). Only Rapid PVST+ is correctly matched with providing fast per-VLAN convergence, but the five wrong pairings make the overall option incorrect.
When this WOULD be correct
If the question asked to match features with incorrect purposes (e.g., 'Match each switching feature to its most inaccurate purpose'), then option C would be correct because it pairs each feature with a purpose that is the opposite of its actual function.
STP provides fast per-VLAN convergence, VTP aggregates links, EtherChannel prevents loops, Port Security manages VLANs, DTP restricts MAC addresses, and Rapid PVST+ negotiates trunks.
Why it's wrong here
Every pairing in this option is mismatched: STP does not provide fast convergence, that is the role of Rapid PVST+; VTP does not aggregate links, EtherChannel does; EtherChannel does not prevent loops, STP does; Port Security does not manage VLANs, VTP does; DTP does not restrict MAC addresses, Port Security does; and Rapid PVST+ does not negotiate trunks, DTP does. Because all six features are assigned to the wrong function, the entire answer is incorrect.
When this WOULD be correct
This option would be correct if the question asked to match features to incorrect purposes (e.g., 'Match each switching feature to its most inaccurate purpose'). In that case, all mappings would be intentionally wrong.
Option-by-option analysis
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The 200-301 exam frequently reuses these exact scenarios with slightly different constraints.
Why this is correct
This option correctly aligns each switching feature with its documented Cisco IOS purpose: STP runs the 802.1D algorithm to block redundant ports and prevent Layer 2 loops; VTP propagates VLAN configuration changes across a domain; EtherChannel bundles multiple physical links into a single logical link to increase bandwidth; Port Security restricts ingress traffic to configured MAC addresses; DTP negotiates trunking mode between Cisco switches; and Rapid PVST+ runs an RSTP instance per VLAN, enabling fast convergence after a topology change.
Why this is wrong here
This option incorrectly assigns functions to each switching feature: STP does not manage VLANs, VTP does not prevent loops, EtherChannel does not restrict MAC addresses, Port Security does not aggregate links, DTP does not provide fast per-VLAN convergence, and Rapid PVST+ does not negotiate trunks.
★ When this WOULD be the correct answer
This option would be correct if the question asked to match each feature to its opposite or least accurate purpose, or if the exam intentionally reversed all pairings to test knowledge of incorrect associations.
Why candidates choose this
Candidates may confuse the purposes of similar-sounding features (e.g., STP and VTP both involve 'protocol' and 'VLAN' in their names) or rely on memorization without understanding each feature's specific role.
Why this is wrong here
STP does not aggregate links; EtherChannel does. VTP does not prevent loops; STP does. EtherChannel does not manage VLANs; VTP does. Port Security does not negotiate trunks; DTP does. DTP does not restrict MAC addresses; Port Security does.
★ When this WOULD be the correct answer
If the question asked to match features with incorrect purposes (e.g., 'Match each switching feature to its most inaccurate purpose'), then option C would be correct because it pairs each feature with a purpose that is the opposite of its actual function.
Why candidates choose this
Candidates may confuse the roles of STP and EtherChannel (both involve redundancy), VTP and VLAN management (VTP manages VLANs, but STP is often associated with VLANs in PVST+), and DTP with trunking (DTP negotiates trunks, but Port Security is about MAC addresses).
Why this is wrong here
STP does not provide fast per-VLAN convergence; Rapid PVST+ does. VTP does not aggregate links; EtherChannel does. EtherChannel does not prevent loops; STP does. Port Security does not manage VLANs; VTP does. DTP does not restrict MAC addresses; Port Security does. Rapid PVST+ does not negotiate trunks; DTP does.
★ When this WOULD be the correct answer
This option would be correct if the question asked to match features to incorrect purposes (e.g., 'Match each switching feature to its most inaccurate purpose'). In that case, all mappings would be intentionally wrong.
Why candidates choose this
Candidates may confuse the roles of STP and Rapid PVST+ (both deal with loops/convergence) and mix up VTP and Port Security (both involve VLANs/MACs), leading to a scrambled but plausible-sounding set of mismatches.
Analysis generated from the official 200-301blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Visual reference
Quick reference
| Model | Acronym | Who Controls Access? | Best For |
|---|---|---|---|
| Discretionary Access Control | DAC | Resource owner | Small teams, file shares |
| Mandatory Access Control | MAC | System / security labels | Classified govt / military |
| Role-Based Access Control | RBAC | Administrator (via roles) | Enterprise environments |
| Attribute-Based Access Control | ABAC | Policy engine (user + resource attributes) | Fine-grained, dynamic policies |
| Rule-Based Access Control | RuBAC | System rules / ACLs | Firewall rules, network ACLs |
Go deeper
Learn chapter
Configuring Switch Ports for Desktops, VoIP Phones, APs, IoT, and Virtualized Hosts
Key term
STP
STP (Spanning Tree Protocol) is a network protocol that prevents loops in Ethernet networks by creating a loop-free logical topology.
Key term
EtherChannel
EtherChannel is a technology that bundles multiple physical Ethernet links into a single logical link to increase bandwidth and provide redundancy.
About these practice questions
This 200-301 question is part of Courseiva's 1,389-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 200-301 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-301 exam.