Cisco CCNA — Practice Questions flashcards

6 of 75 questions free to study here · 6 topics · the whole deck is built into Willys

Multiple-choice practice questions, one best answer each, on subnetting, IPv6, VLANs, trunks, EtherChannel, STP, routing, OSPF, NAT, DHCP, QoS, SSH, ACLs, Layer 2 security and automation.

Get the app All Cisco CCNA decks

Practice deck · part of Cisco CCNA · written against: Exam 200-301 v1.1 topics. Updated 2026-10-10.

Study the free sample

6 questions from the deck as they are. Flip, rate yourself, filter by topic; your progress stays in this browser.

The 6 sample questions as a list

After a WAN provider change, show ip interface brief on R1 lists Serial0/0/0 with Status up and Protocol down. The cable and the provider's clocking have been checked and are fine. What is the most likely cause?

A) The interface has been administratively shut down
B) The two ends use mismatched serial encapsulations
C) The serial cable is unplugged at the far end
D) The interface has no IP address configured on it

B) The two ends use mismatched serial encapsulations

Status up means Layer 1 sees a signal; Protocol down means the data link layer is failing, and a serial encapsulation mismatch is a classic cause. A shut interface reads administratively down, and an interface with no cable is down/down.
Network Fundamentals › Interfaces and Cabling
Router-on-a-stick: R1's subinterface g0/0.30 has encapsulation dot1Q 20 and ip address 192.168.30.1 255.255.255.0. The switch port to R1 is a working trunk. Hosts in VLAN 30 cannot reach 192.168.30.1. What is the cause?

A) The subinterface is tagged for VLAN 20, not VLAN 30
B) The subinterface needs no switchport to route
C) The switch port facing R1 must be an access port
D) Subinterface numbers must start at .1 and count upward

A) The subinterface is tagged for VLAN 20, not VLAN 30

The encapsulation dot1Q value sets the VLAN; the subinterface number is only a label. This subinterface handles VLAN 20 frames, so encapsulation dot1Q 30 is needed for VLAN 30 hosts to reach it.
Network Access › VLANs and Inter-VLAN Routing
R1's routing table contains S 10.0.0.0/8 via 192.168.1.1, O 10.1.0.0/16 via 192.168.2.1, and O 10.1.4.0/22 via 192.168.3.1. A packet arrives for 10.1.6.20. Which next hop does R1 use?

A) 192.168.3.1
B) 192.168.2.1
C) 192.168.1.1
D) None, it drops the packet

A) 192.168.3.1

The longest matching prefix wins. 10.1.4.0/22 covers 10.1.4.0 to 10.1.7.255, so 10.1.6.20 matches the /22 as well as the /16 and /8, and the /22 is the most specific.
IP Connectivity › Routing Table and Path Selection
A router has access-list 1 permit 10.1.1.0 0.0.0.255 and ip nat inside source list 1 interface g0/1 overload, but show ip nat translations stays empty and users cannot reach the internet. What was most likely forgotten?

A) ip nat inside and ip nat outside on the interfaces
B) A static NAT entry for every inside host address
C) A pool of public addresses defined with ip nat pool PUB
D) An ip nat outside source list 1 entry for replies

A) ip nat inside and ip nat outside on the interfaces

The router translates only between interfaces marked ip nat inside (LAN side) and ip nat outside (internet side). With interface g0/1 overload, PAT borrows that interface's address, so no pool is needed.
IP Services › NAT and PAT
R1's configuration contains both enable password and enable secret, set to different values. Which value grants access to privileged EXEC mode?

A) Neither, until password encryption is on
B) Whichever was configured most recently
C) The enable password value
D) The enable secret value

D) The enable secret value

When both exist, IOS uses the enable secret and ignores the enable password, which is kept only for backward compatibility. The secret is stored as a one-way hash, while the password is clear text unless service password-encryption is on.
Security Fundamentals › Device Access Control
A Python script sends REST calls to Catalyst Center asking it to deploy a new VLAN, and Catalyst Center then pushes the configuration to the switches. Which interface does the script use?

A) A NETCONF session to each switch
B) The controller's southbound interface
C) The controller's northbound API
D) The switches' data plane

C) The controller's northbound API

The northbound API faces applications and scripts, usually over REST. The southbound interface is what the controller uses to program devices, with protocols such as NETCONF, SNMP or the CLI over SSH.
Automation and Programmability › Controller-Based Networking

Unlock the whole deck

You are studying a free 6-question sample. All 75 questions of Cisco CCNA — Practice Questions, the other 3 Cisco CCNA decks, and spaced-repetition scheduling are built into Willys. 14-day free trial, then $14.99 a year.

Get the app

In Willys, tap Exam Library at the top of your Decks (or Browse Exam Library… under the + button), find the exam on its shelf or by search, tick it and tap Add.

More Cisco CCNA decks

Network Fundamentals and Network Access IP Connectivity and IP Services Security Fundamentals, Automation and Programmability

← All Cisco CCNA decks, with the study guide and topic outline.

About these cards

Review status: Second-reader reviewed, with corrections applied.

Checked against:

Cisco CCNA 200-301 v1.1 exam topics — topic outline only; no text copied
Subnetting, EUI-64, solicited-node, wildcard-mask and JSON answers verified with the Python standard-library ipaddress and json modules
Cisco IOS XE 17.16.1 and 17.18.1 YANG data models (YangModels/yang on GitHub) and the Cisco Catalyst Center Python SDK (dnacentersdk, MIT License) — command syntax, defaults, value ranges and Catalyst Center product name checked; no text copied

These are independent study notes written for Willys. They are not official exam material, may contain mistakes, and are no substitute for your course, your teacher or the exam owner's own publications. Found an error? Tell us — corrections ship as a new version of the deck.

Cisco® and CCNA® are trademarks of Cisco Systems, Inc. This product is not affiliated with or endorsed by Cisco.

Use of these pages is covered by our Terms of Use.