The answer is to configure interface GigabitEthernet0/1 with `switchport mode access`, `switchport access vlan 10`, `switchport voice vlan 20`, and `power inline auto`, then configure interface GigabitEthernet0/2 with `switchport access vlan 30` and `power inline never`. This is correct because a Cisco IP phone uses a separate logical voice VLAN to tag its upstream traffic, while the attached PC’s data remains untagged in the access VLAN; the `power inline auto` command enables PoE to power the phone, whereas `power inline never` disables it for the AP, which should use its own power source. On the CCNA 200-301 v2 exam, this tests your ability to differentiate between data, voice, and PoE configurations on a multilayer switch, with a common trap being forgetting the `switchport voice vlan` command or applying PoE to the AP port. Remember the mnemonic “Data on Access, Voice on Voice, Power on Auto” to keep the three layers straight.
CCNA Switching and Network Access Practice Question
This 200-301 practice question tests your understanding of switching and network access. Examine the command output carefully: the correct answer depends on what the output actually shows, not on general recall alone. After answering, compare your reasoning against the explanation and wrong-answer breakdown below. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.
Exhibit
Current running-config (partial):
!
hostname MLS1
!
interface GigabitEthernet0/1
switchport mode access
switchport access vlan 10
no shutdown
!
interface GigabitEthernet0/2
switchport mode access
switchport access vlan 10
no shutdown
!
interface Vlan1
ip address 192.168.1.1 255.255.255.0
no shutdown
!
end
You are connected to a multilayer switch MLS1 via the console. Configure MLS1 so that IP phones connected to interface GigabitEthernet0/1 receive power via PoE, use VLAN 10 for data traffic, and use VLAN 20 for voice traffic, while the access port for an AP on GigabitEthernet0/2 should be placed in VLAN 30 and have PoE disabled. Verify your configuration using appropriate show commands.
Current running-config (partial):
!
hostname MLS1
!
interface GigabitEthernet0/1
switchport mode access
switchport access vlan 10
no shutdown
!
interface GigabitEthernet0/2
switchport mode access
switchport access vlan 10
no shutdown
!
interface Vlan1
ip address 192.168.1.1 255.255.255.0
no shutdown
!
end
A
interface GigabitEthernet0/1
switchport mode access
switchport access vlan 10
switchport voice vlan 20
power inline auto
!
interface GigabitEthernet0/2
switchport mode access
switchport access vlan 30
power inline never
This configuration correctly enables PoE on G0/1 for the IP phone, sets the voice VLAN to 20, and uses access VLAN 10 for data. On G0/2, it sets the access VLAN to 30 and disables PoE for the AP. Verification with 'show interfaces switchport' and 'show power inline' confirms the settings.
B
interface GigabitEthernet0/1
switchport mode trunk
switchport trunk allowed vlan 10,20
power inline auto
!
interface GigabitEthernet0/2
switchport mode access
switchport access vlan 30
power inline never
Why wrong: This is incorrect because the IP phone port should be an access port, not a trunk. Using a trunk port would require the phone to negotiate trunking, which is not the standard Cisco IP phone deployment. The voice VLAN is configured via 'switchport voice vlan', not by trunking.
C
interface GigabitEthernet0/1
switchport mode access
switchport access vlan 20
switchport voice vlan 10
power inline auto
!
interface GigabitEthernet0/2
switchport mode access
switchport access vlan 30
power inline never
Why wrong: This is incorrect because the voice VLAN should be 20, not the access VLAN. The access VLAN is for data traffic (typically VLAN 10), and the voice VLAN is for voice traffic. Swapping them would put voice traffic in VLAN 10 and data in VLAN 20, which is not the requirement.
D
interface GigabitEthernet0/1
switchport mode access
switchport access vlan 10
switchport voice vlan 20
power inline never
!
interface GigabitEthernet0/2
switchport mode access
switchport access vlan 30
power inline auto
Why wrong: This is incorrect because PoE is disabled on the IP phone port (G0/1) and enabled on the AP port (G0/2), which is the opposite of what is required. The IP phone needs PoE to power on, and the AP should have PoE disabled.
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
interface GigabitEthernet0/1
switchport mode access
switchport access vlan 10
switchport voice vlan 20
power inline auto
!
interface GigabitEthernet0/2
switchport mode access
switchport access vlan 30
power inline never
For the IP phone port (G0/1), you need to enable PoE (power inline auto) and configure the voice VLAN (switchport voice vlan 20) so that the phone uses VLAN 20 for voice and the access VLAN 10 for data. For the AP port (G0/2), you must change the access VLAN to 30 and disable PoE (power inline never) to prevent powering the AP through the switch. Verify with 'show interfaces switchport' to confirm voice VLAN and access VLAN settings, and 'show power inline' to check PoE status.
Key principle: A trunk being up does not mean the VLAN is allowed across it. Always verify the allowed VLAN list and whether the VLAN exists on both switches.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
✓
interface GigabitEthernet0/1
switchport mode access
switchport access vlan 10
switchport voice vlan 20
power inline auto
!
interface GigabitEthernet0/2
switchport mode access
switchport access vlan 30
power inline never
Why this is correct
This configuration correctly enables PoE on G0/1 for the IP phone, sets the voice VLAN to 20, and uses access VLAN 10 for data. On G0/2, it sets the access VLAN to 30 and disables PoE for the AP. Verification with 'show interfaces switchport' and 'show power inline' confirms the settings.
Related concept
Access ports place end devices into a single VLAN.
✗
interface GigabitEthernet0/1
switchport mode trunk
switchport trunk allowed vlan 10,20
power inline auto
!
interface GigabitEthernet0/2
switchport mode access
switchport access vlan 30
power inline never
Why it's wrong here
This is incorrect because the IP phone port should be an access port, not a trunk. Using a trunk port would require the phone to negotiate trunking, which is not the standard Cisco IP phone deployment. The voice VLAN is configured via 'switchport voice vlan', not by trunking.
✗
interface GigabitEthernet0/1
switchport mode access
switchport access vlan 20
switchport voice vlan 10
power inline auto
!
interface GigabitEthernet0/2
switchport mode access
switchport access vlan 30
power inline never
Why it's wrong here
This is incorrect because the voice VLAN should be 20, not the access VLAN. The access VLAN is for data traffic (typically VLAN 10), and the voice VLAN is for voice traffic. Swapping them would put voice traffic in VLAN 10 and data in VLAN 20, which is not the requirement.
✗
interface GigabitEthernet0/1
switchport mode access
switchport access vlan 10
switchport voice vlan 20
power inline never
!
interface GigabitEthernet0/2
switchport mode access
switchport access vlan 30
power inline auto
Why it's wrong here
This is incorrect because PoE is disabled on the IP phone port (G0/1) and enabled on the AP port (G0/2), which is the opposite of what is required. The IP phone needs PoE to power on, and the AP should have PoE disabled.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The 200-301 exam frequently reuses these exact scenarios with slightly different constraints.
✓interface GigabitEthernet0/1
switchport mode access
switchport access vlan 10
switchport voice vlan 20
power inline auto
!
interface GigabitEthernet0/2
switchport mode access
switchport access vlan 30
power inline neverCorrect answer▾
Why this is correct
This configuration correctly enables PoE on G0/1 for the IP phone, sets the voice VLAN to 20, and uses access VLAN 10 for data. On G0/2, it sets the access VLAN to 30 and disables PoE for the AP. Verification with 'show interfaces switchport' and 'show power inline' confirms the settings.
✗interface GigabitEthernet0/1
switchport mode trunk
switchport trunk allowed vlan 10,20
power inline auto
!
interface GigabitEthernet0/2
switchport mode access
switchport access vlan 30
power inline neverWrong answer — click to see why▾
Why this is wrong here
The specific factual error is that IP phones typically use an access port with a voice VLAN, not a trunk port. Trunking is unnecessary and can cause compatibility issues.
Why candidates choose this
Candidates might think that because the phone uses two VLANs (data and voice), a trunk is needed to carry both, but Cisco's voice VLAN feature handles this without trunking.
✗interface GigabitEthernet0/1
switchport mode access
switchport access vlan 20
switchport voice vlan 10
power inline auto
!
interface GigabitEthernet0/2
switchport mode access
switchport access vlan 30
power inline neverWrong answer — click to see why▾
Why this is wrong here
The specific factual error is confusing the access VLAN and voice VLAN assignments. The voice VLAN is configured with 'switchport voice vlan', and the access VLAN with 'switchport access vlan'.
Why candidates choose this
Candidates may misread the requirement or think the voice VLAN is the same as the access VLAN, leading to the swap.
✗interface GigabitEthernet0/1
switchport mode access
switchport access vlan 10
switchport voice vlan 20
power inline never
!
interface GigabitEthernet0/2
switchport mode access
switchport access vlan 30
power inline autoWrong answer — click to see why▾
Why this is wrong here
The specific factual error is reversing the PoE settings: 'power inline never' on the phone port and 'power inline auto' on the AP port.
Why candidates choose this
Candidates might confuse which device needs PoE or mistakenly think the AP requires PoE, but the question explicitly states the AP should have PoE disabled.
Analysis generated from the official 200-301blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Common exam traps
Common exam trap: an active trunk can still block the VLAN you need
A trunk being up does not prove every VLAN is crossing it. Check allowed VLAN lists, native VLAN mismatch, VLAN existence and access-port assignment.
Detailed technical explanation
How to think about this question
VLAN questions usually combine access-port and trunking clues. The key is to identify whether the issue is local to one switchport, caused by the trunk, or caused by the VLAN not existing where it needs to exist.
KKey Concepts to Remember
Access ports place end devices into a single VLAN.
Trunk ports carry multiple VLANs between switches.
Allowed VLAN lists decide which VLANs can cross a trunk.
Native VLAN mismatch can create confusing symptoms.
TExam Day Tips
→Use show vlan brief to verify access VLANs.
→Use show interfaces trunk to verify trunk state and allowed VLANs.
→Do not treat every same-VLAN issue as a routing problem.
Key takeaway
A trunk being up does not mean the VLAN is allowed across it. Always verify the allowed VLAN list and whether the VLAN exists on both switches.
Real-world example
How this comes up in practice
A help-desk technician troubleshoots why a newly connected PC cannot reach shared printers on the same floor. The cable is good, the switch port is active, but the PC is in VLAN 20 and the printers are in VLAN 10. The uplink trunk only allows VLAN 10. A trunk being up does not mean every VLAN crosses it.
Related glossary terms
Concepts from this question explained
These glossary pages explain the core terms tested in this 200-301 question in full detail.
Review VLAN allowed lists, native VLAN mismatch detection, and how to verify VLAN membership with show vlan brief and show interfaces trunk. Then practise related 200-301 questions on switching, trunking, and access-port configuration.
Switching and Network Access — This question tests Switching and Network Access — Access ports place end devices into a single VLAN..
What is the correct answer to this question?
The correct answer is: interface GigabitEthernet0/1
switchport mode access
switchport access vlan 10
switchport voice vlan 20
power inline auto
!
interface GigabitEthernet0/2
switchport mode access
switchport access vlan 30
power inline never — For the IP phone port (G0/1), you need to enable PoE (power inline auto) and configure the voice VLAN (switchport voice vlan 20) so that the phone uses VLAN 20 for voice and the access VLAN 10 for data. For the AP port (G0/2), you must change the access VLAN to 30 and disable PoE (power inline never) to prevent powering the AP through the switch. Verify with 'show interfaces switchport' to confirm voice VLAN and access VLAN settings, and 'show power inline' to check PoE status.
What should I do if I get this 200-301 question wrong?
Review VLAN allowed lists, native VLAN mismatch detection, and how to verify VLAN membership with show vlan brief and show interfaces trunk. Then practise related 200-301 questions on switching, trunking, and access-port configuration.
What is the key concept behind this question?
Access ports place end devices into a single VLAN.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. You are connected to a multilayer switch MLS1. Configure it so that IP phones connected to FastEthernet 0/1 and FastEthernet 0/2 use voice VLAN 20 and receive power via PoE. Additionally, FastEthernet 0/3 must be configured as an access port for a wireless access point (AP) on VLAN 30, with PoE enabled. Verify your configuration using 'show interfaces switchport' and 'show power inline'.
hard
✓ A.Configure 'switchport voice vlan 20' on Fa0/1 and Fa0/2; ensure PoE is enabled (auto) on all three ports.
B.Configure 'switchport mode trunk' on Fa0/1 and Fa0/2, and set the native VLAN to 20; enable PoE on Fa0/3.
C.Configure 'switchport access vlan 20' on Fa0/1 and Fa0/2, and 'switchport voice vlan 30' on Fa0/3; enable PoE globally.
D.Configure 'power inline never' on Fa0/1 and Fa0/2, and 'switchport voice vlan 20' on Fa0/3; ensure Fa0/3 is in trunk mode.
Why A: The switch ports Fa0/1 and Fa0/2 are currently configured as access ports on VLAN 10, with no voice VLAN. To support IP phones, you must configure a voice VLAN (VLAN 20) on these interfaces. Additionally, PoE is already enabled (auto) but needs to remain active. For Fa0/3, it is already an access port on VLAN 30, which is correct for an AP, but you must ensure PoE is enabled (it is). The missing configuration for Fa0/1 and Fa0/2 is the 'switchport voice vlan 20' command. After applying, verify using 'show interfaces switchport' to see the voice VLAN set, and 'show power inline' to confirm PoE delivery.
Variation 2. You are connected to a Multilayer Switch MLS1. Configure the switch so that interface GigabitEthernet1/0/1 is an access port for VLAN 10, with voice VLAN 110 for an IP phone, and enable PoE. Additionally, interface GigabitEthernet1/0/2 must be an access port for VLAN 20 to connect an AP. Verify the configuration using 'show interfaces switchport' and 'show power inline'.
Why A: Option A is correct. It configures Gi1/0/1 as an access port in VLAN 10 with voice VLAN 110 and PoE enabled, and Gi1/0/2 as an access port in VLAN 20. Option B is wrong because it uses 'switchport mode trunk' instead of 'switchport mode access'. For a voice VLAN, the port should be an access port, not a trunk. Option C is wrong because it disables PoE with 'power inline never', but the IP phone requires power. Option D is wrong because it assigns the access VLAN as 110 and voice VLAN as 10, reversing the intended roles. Verify with 'show interfaces switchport' and 'show power inline'.
Last reviewed: Jun 6, 2026
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
This 200-301 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-301 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.