Try 9 Real Questions From Cisco CCNA Exam v1.1 (200-301) - 900 Full Rationale Questions & Answers
These are unedited questions from the full 900-question set, pulled from across every exam domain. Click a question to reveal the answer and the full rationale for every option, exactly as it appears in the PDF.
Which device primarily makes forwarding decisions based on destination IP address and a routing table?
Show answer & full rationale
A (Correct): Routers forward packets using Layer 3 information (destination IP) and routing tables.
B: Layer 2 switches forward frames using MAC addresses, not IP routes.
C: Hubs repeat bits out all ports with no forwarding logic.
D: Access points bridge wireless to wired at Layer 2; they don't route by default.
On a switch, which port type is used to carry traffic for multiple VLANs between switches?
Show answer & full rationale
A: Access ports carry a single VLAN (plus optional voice VLAN on some designs).
B (Correct): Trunk ports carry multiple VLANs, commonly using 802.1Q tagging.
C: Routed ports operate at Layer 3 and do not carry VLAN tags as trunks do.
D: PortFast is a spanning-tree feature, not a port type for VLAN carriage.
A router has routes for 10.1.0.0/16, 10.1.10.0/24, and 10.1.10.128/25. Which route is chosen for destination 10.1.10.200?
Show answer & full rationale
A: /16 is less specific than the other matches.
B: /24 matches, but /25 is more specific and wins.
C (Correct): Routers use longest prefix match; /25 is more specific than /24 and /16.
D: Load-balancing applies when multiple best routes exist with equal prefix length and comparable attributes — not the case here.
Which protocol is most commonly used to synchronize network device time with a time source?
Show answer & full rationale
A: SNMP monitors and manages devices; it doesn't sync time.
B: Syslog sends logs; timestamps rely on correct time but syslog doesn't set it.
C: FTP transfers files and has nothing to do with time synchronization.
D (Correct): NTP synchronizes time between devices and time servers.
Which HTTP method is typically used to retrieve a resource in a REST API?
Show answer & full rationale
A: POST generally creates a resource or triggers an action.
B (Correct): GET retrieves (reads) a resource.
C: PATCH partially updates a resource.
D: PUT typically replaces or creates a resource at a specific URI.
A switch port is configured as an access port in VLAN 10. A PC sends an untagged Ethernet frame into that port. How does the switch handle it internally?
Show answer & full rationale
A: Untagged is normal for access ports; it isn't dropped for that reason.
B: "Native VLAN" is a trunk concept, not access-port behavior.
C (Correct): Access ports associate untagged inbound frames with the configured access VLAN internally.
D: On trunks, VLAN 10 traffic is typically tagged; it isn't sent untagged by default.
Which ACL entry best permits only HTTP traffic from 192.168.1.0/24 to server 10.10.10.10 and denies everything else by default?
Show answer & full rationale
A: Permits all IP traffic, which is too broad for an HTTP-only rule.
B (Correct): Matches TCP, the correct source subnet, the destination host, and HTTP port 80; the implicit deny handles the rest.
C: Source is "any," which is too broad — it doesn't restrict to the 192.168.1.0/24 subnet.
D: HTTP uses TCP, not UDP, so this rule would never match HTTP traffic.
Two routes exist to 203.0.113.0/24: one learned by OSPF (administrative distance 110) and one learned by a static route (administrative distance 1). Both have the same prefix length. Which route is preferred?
Show answer & full rationale
A: Dynamic routing is not automatically preferred over static routing.
B (Correct): For equal prefix length, the lower administrative distance wins; static (1) beats OSPF (110).
C: Metrics matter within a single routing source after administrative distance has already chosen between sources.
D: Load balancing requires multiple best routes; the OSPF route isn't a "best" route here since static wins on AD.
A host is configured as 192.168.5.130/26. What is the network address?
Show answer & full rationale
A: 192.168.5.64 belongs to the previous /26 block (64–127), not the one containing .130.
B: 192.168.5.192 belongs to the following /26 block (192–255).
C (Correct): A /26 mask creates blocks of 64 addresses; .130 falls in the 128–191 block, so the network address is 192.168.5.128.
D: 192.168.5.0 belongs to the first /26 block (0–63), not the one containing .130.
Cisco CCNA Exam v1.1 (200-301) - 900 Full Rationale Questions & Answers — $29.99, instant PDF download with full rationale on every answer.
View the practice questions →