CCNA 200-301 Practice Questions
NetExam Pro · 370 exam-style questions · All six 200-301 domains · Full explanations
370 questions. Zero surprises on exam day.
Every NetExam Pro practice question is written in real CCNA 200-301 style — the same phrasing tricks, the same distractors, the same depth. Each one comes with a full written explanation, so a wrong answer becomes a lesson, not just a red mark.
- 370 original questions across all six exam domains
- Topic drills — practice one domain at a time (OSPF, VLANs, NAT, subnetting…)
- Full explanations for every question, right or wrong
- Weak-area tracking highlights the domains costing you marks
- 300 flashcards included for rapid-fire revision
Sample CCNA 200-301 practice questions
Network Access
Which statement about the default VLAN on a Cisco switch is true?
- It can be deleted once a new management VLAN is created
- It carries untagged control traffic such as CDP and STP BPDUs
- It is automatically excluded from all trunk links
- It cannot be used as the native VLAN on a trunk
Show answer & explanation
Answer: It carries untagged control traffic such as CDP and STP BPDUs
VLAN 1 is the default VLAN: it cannot be deleted or renamed, and it carries control-plane traffic (CDP, VTP, DTP and STP BPDUs) untagged. It is also the default native VLAN on 802.1Q trunks. The distractors are wrong because VLAN 1 can never be deleted, it is allowed on trunks by default, and it is in fact the default native VLAN.
IP Services
A server at inside local address 192.168.1.10 must always be reachable from the Internet at public address 203.0.113.5. The inside and outside interfaces are already designated. Which command creates this mapping?
- ip nat inside source static 192.168.1.10 203.0.113.5
- ip nat outside source static 203.0.113.5 192.168.1.10
- ip nat inside source list 10 interface GigabitEthernet0/0 overload
- ip nat inside source static 203.0.113.5 192.168.1.10
Show answer & explanation
Answer: ip nat inside source static 192.168.1.10 203.0.113.5
Static NAT creates a permanent one-to-one mapping with the syntax 'ip nat inside source static <inside-local> <inside-global>', so the private address comes first. The 'outside source' variant reverses the translation direction and does not apply here. The overload command configures PAT for many hosts sharing one address, not a fixed server mapping, and reversing the two addresses would map the wrong direction.
Automation and Programmability
In a software-defined networking (SDN) architecture, which function is performed by the SDN controller?
- It forwards user data frames between hosts at wire speed.
- It makes centralised forwarding decisions and pushes them down to the network devices.
- It provides the CLI and SNMP interfaces used by network administrators.
- It encrypts management traffic between the controller and the managed devices.
Show answer & explanation
Answer: It makes centralised forwarding decisions and pushes them down to the network devices.
The SDN controller is the centralised control plane: it computes forwarding decisions and programs them into devices via southbound APIs. Frame forwarding is the data plane's job, while CLI and SNMP access belong to the management plane. Encrypting management traffic is a transport concern, not the controller's defining role.
Questions mapped to the 200-301 blueprint
The question bank is organised around Cisco's official 200-301 exam topics: Network Fundamentals (20%), Network Access (20%), IP Connectivity (25%), IP Services (10%), Security Fundamentals (15%), and Automation & Programmability (10%). Topic drills let you attack one domain at a time; full mock exams mix them the way the real test does.
Full access
Unlock all 370 questions, unlimited mocks, 20 in-browser CLI labs, 300 flashcards and the 49-section study guide for £29 one-time or £5/month.