CCNA Switching and Network Access Practice Question
This 200-301 practice question tests your understanding of switching and network access. Read the scenario carefully and evaluate each option against the stated constraints before committing to an answer. A key principle to apply: an access port connects a single endpoint device to one VLAN and forwards untagged frames belonging to that VLAN.. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.
Match each switchport or trunking concept to its most accurate role.
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Access port
- Access port: carries traffic for a single VLAN (usually to an endpoint).
- Trunk: carries traffic for multiple VLANs between switches.
- Allowed VLAN list: controls which VLANs are permitted to traverse the trunk.
- Native VLAN: carries untagged frames on the trunk (typically VLAN 1).
The other terms (Dynamic Desirable, Dynamic Auto, Trunking, DTP) are related to trunk negotiation or generic concepts, not directly matched to these roles.
Key principle: An access port connects a single endpoint device to one VLAN and forwards untagged frames belonging to that VLAN.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
✓
Access port
Why this is correct
An access port belongs to a single VLAN and carries traffic for that VLAN only, typically used for end devices like PCs.
Related concept
An access port connects a single endpoint device to one VLAN and forwards untagged frames belonging to that VLAN.
✗
Trunk port
Why it's wrong here
A trunk port carries traffic for multiple VLANs using 802.1Q tagging, but the question asks for the role of an access port.
✗
Dynamic Desirable
Why it's wrong here
Dynamic Desirable is a DTP mode that actively initiates trunking, not a switchport role.
✗
Dynamic Auto
Why it's wrong here
Dynamic Auto is a DTP mode that passively responds to trunk negotiation, not a switchport role.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The 200-301 exam frequently reuses these exact scenarios with slightly different constraints.
✓Access portCorrect answer▾
Why this is correct
An access port belongs to a single VLAN and carries traffic for that VLAN only, typically used for end devices like PCs.
✗Trunk portWrong answer — click to see why▾
Why this is wrong here
Trunk ports are used to interconnect switches or routers, not for a single VLAN end device connection.
Why candidates choose this
Candidates may confuse the general term 'trunk' with the specific role of an access port.
✗Dynamic DesirableWrong answer — click to see why▾
Why this is wrong here
It is a negotiation mode, not a port type that belongs to one VLAN.
Why candidates choose this
Candidates might think 'dynamic' implies flexibility in VLAN assignment, but it refers to trunk negotiation.
✗Dynamic AutoWrong answer — click to see why▾
Why this is wrong here
It does not define a port's VLAN membership; it only controls trunking behavior.
Why candidates choose this
Similar to Dynamic Desirable, candidates may confuse DTP modes with port roles.
Analysis generated from the official 200-301blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Common exam traps
Common exam trap: answer the scenario, not the keyword
Do not confuse DTP negotiation modes (Dynamic Desirable, Dynamic Auto) with port roles (access, trunk). Access ports are statically assigned to one VLAN, while trunk ports carry multiple VLANs.
Detailed technical explanation
How to think about this question
Switchports in Cisco networking operate primarily in two modes: access and trunk. An access port connects end devices like PCs or printers to a single VLAN, sending and receiving untagged Ethernet frames. This simplifies device VLAN membership and isolates traffic within that VLAN. In contrast, a trunk port is configured between switches or network devices to carry traffic for multiple VLANs simultaneously. It tags frames with VLAN identifiers using IEEE 802.1Q encapsulation, allowing VLAN segregation across a shared physical link.
The allowed VLAN list on a trunk port controls which VLANs are permitted to send traffic across that trunk. By default, all VLANs are allowed, but administrators can restrict this list to improve security and reduce unnecessary broadcast traffic. The native VLAN is a special VLAN on a trunk that carries untagged frames. Frames belonging to the native VLAN are sent without 802.1Q tags, which is critical for compatibility with devices that do not support tagging or for protocols that rely on untagged frames.
A common exam trap involves confusing the native VLAN with the allowed VLAN list or the access port function. Misconfiguring the native VLAN can cause VLAN hopping or traffic leakage between VLANs. Additionally, mixing access and trunk port configurations on the same interface or misunderstanding which VLANs are allowed on a trunk can lead to connectivity issues. Understanding these roles helps troubleshoot VLAN-related problems and ensures proper VLAN segmentation in Cisco networks.
KKey Concepts to Remember
An access port connects a single endpoint device to one VLAN and forwards untagged frames belonging to that VLAN.
A trunk port carries traffic for multiple VLANs simultaneously by tagging frames with 802.1Q VLAN identifiers.
The allowed VLAN list on a trunk port restricts which VLANs are permitted to send traffic across that trunk link.
The native VLAN on a trunk port carries untagged frames and is associated with one specific VLAN for compatibility.
Frames belonging to the native VLAN are sent without VLAN tags, which prevents tagging issues with legacy devices.
Misconfiguring the native VLAN or allowed VLAN list can cause VLAN leakage or loss of connectivity between switches.
Access ports do not tag frames, while trunk ports tag frames except for the native VLAN traffic.
Proper VLAN trunking configuration is essential for maintaining VLAN segmentation and preventing broadcast domain overlap.
TExam Day Tips
→Watch for words such as best, first, most likely and least administrative effort.
→Review why wrong options are wrong, not only why the correct option is correct.
Key takeaway
An access port connects a single endpoint device to one VLAN and forwards untagged frames belonging to that VLAN.
Real-world example
How this comes up in practice
A help-desk technician troubleshoots why a newly connected PC cannot reach shared printers on the same floor. The cable is good, the switch port is active, but the PC is in VLAN 20 and the printers are in VLAN 10. The uplink trunk only allows VLAN 10. A trunk being up does not mean every VLAN crosses it.
Related glossary terms
Concepts from this question explained
These glossary pages explain the core terms tested in this 200-301 question in full detail.
Review an access port connects a single endpoint device to one VLAN and forwards untagged frames belonging to that VLAN., then practise related 200-301 questions on the same topic to reinforce the concept.
Switching and Network Access — This question tests Switching and Network Access — An access port connects a single endpoint device to one VLAN and forwards untagged frames belonging to that VLAN..
What is the correct answer to this question?
The correct answer is: Access port — - Access port: carries traffic for a single VLAN (usually to an endpoint).
- Trunk: carries traffic for multiple VLANs between switches.
- Allowed VLAN list: controls which VLANs are permitted to traverse the trunk.
- Native VLAN: carries untagged frames on the trunk (typically VLAN 1).
The other terms (Dynamic Desirable, Dynamic Auto, Trunking, DTP) are related to trunk negotiation or generic concepts, not directly matched to these roles.
What should I do if I get this 200-301 question wrong?
Review an access port connects a single endpoint device to one VLAN and forwards untagged frames belonging to that VLAN., then practise related 200-301 questions on the same topic to reinforce the concept.
What is the key concept behind this question?
An access port connects a single endpoint device to one VLAN and forwards untagged frames belonging to that VLAN.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
This 200-301 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-301 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.