This 200-301 practice question tests your understanding of switching and network access. Read the scenario carefully and evaluate each option against the stated constraints before committing to an answer. A key principle to apply: an access port on a Cisco switch connects a single endpoint device to one specific VLAN, forwarding untagged frames to that VLAN.. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.
What does an access port do on a switch?
Carries multiple VLANs using 802.1Q tags
Why wrong: That describes a trunk port.
Connects to a single VLAN for endpoint traffic
Correct. Access ports are typically used for end hosts.
Disables spanning tree on the interface
Why wrong: Access mode does not disable STP.
Forwards only multicast traffic
Why wrong: Access ports forward normal endpoint traffic, not just multicast.
Answer choices
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
Connects to a single VLAN for endpoint traffic
An access port carries traffic for a single VLAN and sends frames untagged by default to end devices.
Key principle: An access port on a Cisco switch connects a single endpoint device to one specific VLAN, forwarding untagged frames to that VLAN.
Answer analysis
For each option: why learners choose it and why it is or isn't the right answer here.
Carries multiple VLANs using 802.1Q tags
Why it's wrong here
That describes a trunk port.
When this WOULD be correct
If the question asked about the function of a trunk port or the configuration of a switch port that is set to carry multiple VLANs, then this option would be correct. For example, a question might state, 'What type of port allows multiple VLANs to communicate using tagging?'
Connects to a single VLAN for endpoint traffic
Why this is correct
Correct. Access ports are typically used for end hosts.
Related concept
An access port on a Cisco switch connects a single endpoint device to one specific VLAN, forwarding untagged frames to that VLAN.
Disables spanning tree on the interface
Why it's wrong here
Access mode does not disable STP.
When this WOULD be correct
In a question asking about the configuration of a switch port where the focus is on optimizing network performance by disabling spanning tree for specific interfaces, option C could be correct. For instance, if the question specifies a scenario where a switch port is configured as a trunk port for a high-speed link and spanning tree is intentionally disabled to improve throughput.
Forwards only multicast traffic
Why it's wrong here
Access ports forward normal endpoint traffic, not just multicast.
When this WOULD be correct
If the question asked about a specialized switch configuration where an interface is explicitly set to forward only multicast traffic for a specific application, such as a multicast streaming service, then this option would be correct.
Option-by-option analysis
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The 200-301 exam frequently reuses these exact scenarios with slightly different constraints.
Why this is correct
Correct. Access ports are typically used for end hosts.
Why this is wrong here
This option is incorrect because an access port is designed to carry traffic for a single VLAN, not multiple VLANs. The use of 802.1Q tags is specific to trunk ports, which handle multiple VLANs.
★ When this WOULD be the correct answer
If the question asked about the function of a trunk port or the configuration of a switch port that is set to carry multiple VLANs, then this option would be correct. For example, a question might state, 'What type of port allows multiple VLANs to communicate using tagging?'
Why candidates choose this
Candidates may choose this option due to a misunderstanding of VLAN configurations, confusing access ports with trunk ports, which can lead to the assumption that all ports can handle multiple VLANs.
Why this is wrong here
This option is wrong because an access port does not disable spanning tree; it simply connects devices to a single VLAN and participates in the spanning tree protocol for loop prevention.
★ When this WOULD be the correct answer
In a question asking about the configuration of a switch port where the focus is on optimizing network performance by disabling spanning tree for specific interfaces, option C could be correct. For instance, if the question specifies a scenario where a switch port is configured as a trunk port for a high-speed link and spanning tree is intentionally disabled to improve throughput.
Why candidates choose this
Candidates may choose this option due to a misunderstanding of spanning tree functionality, thinking that disabling it on an access port could enhance performance, especially if they confuse access ports with trunk ports.
Why this is wrong here
An access port does not filter traffic based on type; it forwards all traffic types, including unicast and broadcast, not just multicast. Therefore, stating that it only forwards multicast traffic is incorrect.
★ When this WOULD be the correct answer
If the question asked about a specialized switch configuration where an interface is explicitly set to forward only multicast traffic for a specific application, such as a multicast streaming service, then this option would be correct.
Why candidates choose this
Candidates may confuse access ports with multicast configurations, leading them to believe that access ports can be limited to multicast traffic due to their role in handling specific types of network traffic.
Analysis generated from the official 200-301blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Common exam traps
A frequent exam trap is mistaking an access port for a trunk port because both involve VLANs. The trap lies in assuming access ports carry multiple VLANs with 802.1Q tags, which is false; only trunk ports do that. Another pitfall is believing that access ports disable Spanning Tree Protocol, but STP remains active to prevent loops. Additionally, some may incorrectly think access ports forward only multicast traffic, but they forward all traffic types within their VLAN. Recognizing these common misconceptions helps avoid selecting incorrect options that describe trunk behavior or STP settings rather than access port functions.
Detailed technical explanation
An access port on a Cisco switch is a Layer 2 interface configured to carry traffic for only one VLAN. Unlike trunk ports, which tag frames with 802.1Q VLAN identifiers to carry multiple VLANs, access ports send and receive frames untagged. This means that any frame entering or leaving an access port is associated with a single VLAN, which the switch uses to segregate traffic and maintain VLAN boundaries. Access ports are typically used to connect end devices such as computers, printers, or IP phones that do not understand VLAN tagging. The decision to configure a port as access mode is based on the device type and network design. When a port is set as an access port, the switch assigns it to a specific VLAN, and all traffic on that port is assumed to belong to that VLAN. This simplifies traffic management and security because the switch enforces VLAN membership at the port level. Access ports do not participate in VLAN tagging protocols, so frames are transmitted without 802.1Q tags, making it transparent to the connected device. This behavior contrasts with trunk ports, which carry multiple VLANs and tag frames accordingly. A common exam trap is confusing access ports with trunk ports or assuming access ports disable Spanning Tree Protocol (STP). Access ports do not carry multiple VLANs and do not tag frames, so option A is incorrect. Also, STP remains active on access ports to prevent Layer 2 loops, so option C is false. Another mistake is thinking access ports forward only multicast traffic, but they forward all Ethernet traffic types within their VLAN. Understanding these distinctions is critical for correctly identifying the function of access ports and avoiding confusion during the CCNA exam and real-world network design.
Key takeaway
An access port on a Cisco switch connects a single endpoint device to one specific VLAN, forwarding untagged frames to that VLAN.
Real-world example
A help-desk technician troubleshoots why a newly connected PC cannot reach shared printers on the same floor. The cable is good, the switch port is active, but the PC is in VLAN 20 and the printers are in VLAN 10. The uplink trunk only allows VLAN 10. A trunk being up does not mean every VLAN crosses it.
What to study next
Review an access port on a Cisco switch connects a single endpoint device to one specific VLAN, forwarding untagged frames to that VLAN., then practise related 200-301 questions on the same topic to reinforce the concept.
Switching and Network Access — study guide chapter
Learn the concepts, then practise the questions
Switching and Network Access practice questions
Targeted practice on this topic area only
All 200-301 questions
1,819 questions across all exam domains
CCNA 200-301 v2 study guide
Full concept coverage aligned to exam objectives
200-301 practice test guide
How to use practice tests most effectively before exam day
Related practice questions
Use these pages to review the topic behind this question. This is how one missed question becomes focused revision.
Practise 200-301 questions linked to Network Infrastructure and Connectivity.
Practise 200-301 questions linked to Switching and Network Access.
Practise 200-301 questions linked to IP Routing.
Practise 200-301 questions linked to Network Services and Security.
Practise 200-301 questions linked to AI and Network Operations.
Practise IPv4 subnetting, CIDR, masks, host ranges and subnet selection.
Practise OSPF neighbours, router IDs, metrics, areas and routing-table interpretation.
Practise VLANs, access ports, trunks, allowed VLANs and switching scenarios.
Practise spanning tree, root bridge election, port roles and STP troubleshooting.
Practise LACP, PAgP, port-channel behaviour and bundle requirements.
Practise standard and extended ACLs, permit/deny logic and traffic filtering.
Practise static NAT, dynamic NAT, PAT and inside/outside address translation.
Practice this exam
Short sessions build daily habit. Longer sessions build exam-day stamina. Try a timed session to simulate real conditions.
FAQ
Switching and Network Access — This question tests Switching and Network Access — An access port on a Cisco switch connects a single endpoint device to one specific VLAN, forwarding untagged frames to that VLAN..
The correct answer is: Connects to a single VLAN for endpoint traffic — An access port carries traffic for a single VLAN and sends frames untagged by default to end devices.
Review an access port on a Cisco switch connects a single endpoint device to one specific VLAN, forwarding untagged frames to that VLAN., then practise related 200-301 questions on the same topic to reinforce the concept.
An access port on a Cisco switch connects a single endpoint device to one specific VLAN, forwarding untagged frames to that VLAN.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Last reviewed: Apr 12, 2026
This 200-301 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-301 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.