500 scenario-based practice questions covering network fundamentals, IP connectivity, network access, IP services, security fundamentals, and automation. Built to the depth of the real CCNA exam.
No credit card required · Upgrade to 500 questions for $11.99
500 Exam-Style Questions
7-Day Money-Back Guarantee
Is this for you?
Your 200-301 exam is in the next 2–4 weeks
You've studied the concepts but aren't sure you'll pass
You want questions harder than the real exam
You want to understand why answers are correct, not just memorize
Not for you if:
You're looking for braindumps or exam leaks
You haven't started studying the concepts yet
The Cisco CCNA (200-301) is a associate-level Cisco certification. The exam has 100 questions, runs 120 minutes, costs $300, and requires a passing score of ~825/1000. CertSharp provides 500 exam-style 200-301 practice questions — 30 free with no credit card — each with a detailed explanation.
Study guides teach concepts. We prepare you for the actual 200-301 exam.
1
Configuration and troubleshooting scenarios mirror the real CCNA — read the topology, find the fault, pick the fix
2
Every explanation reinforces the why behind OSPF, VLANs, NAT, and ACLs so novel scenarios feel familiar
3
Calibrated harder than the live exam: a steady 80% here predicts a comfortable CCNA pass
4
Updated for 2026 — current 200-301 blueprint including network automation and REST APIs
Free Sample Questions
200-301 Practice Questions (Free Sample)
Real 200-301 exam-style questions from our 500-question Cisco CCNA bank, each with the correct answer and a detailed explanation.
Question 1 — 200-301
A router has two routes to the same destination network: an OSPF route and a static route. Both are valid. Which route does the router install in its routing table by default, and why?
A
The OSPF route, because dynamic routing protocols are always preferred
B
The static route, because it has a lower administrative distance
C
The route with the lowest metric, regardless of source
D
Both routes, load-balanced equally
Correct answer: B — Explanation
When multiple routing sources offer a route to the same prefix, the router compares administrative distance (AD) first. A static route has an AD of 1, while OSPF has an AD of 110, so the static route is preferred and installed. Metric is only compared between routes from the same source. Equal-cost load balancing applies to multiple paths from the same protocol with equal metrics.
Question 2Network FundamentalsEasy
Which device type represents a user-facing endpoint rather than an infrastructure device in a campus network?
A
A distribution-layer multilayer switch aggregating several access switches
B
A wireless LAN controller coordinating RF across many lightweight access points
C
A perimeter router providing the Internet edge connection for the whole site
D
A laptop used by an employee to access email and internal web applications
Show answer & explanation
Correct answer: D — A laptop used by an employee to access email and internal web applications
An endpoint is a device that consumes or originates network services for a user, such as a laptop, phone, or workstation. A distribution switch, a wireless LAN controller, and a perimeter router are all infrastructure devices that forward or manage traffic rather than acting as user endpoints.
Question 3Network FundamentalsMedium
A network engineer needs at least 6 usable host addresses on small point-to-point and edge segments while conserving address space. Which subnet mask provides at least 6 usable hosts with the least waste?
A
255.255.255.248, which is a /29 mask
B
255.255.255.252, which is a /30 mask
C
255.255.255.240, which is a /28 mask
D
255.255.255.224, which is a /27 mask
Show answer & explanation
Correct answer: A — 255.255.255.248, which is a /29 mask
A /29 mask (255.255.255.248) leaves 3 host bits, giving 2^3 minus 2 equals 6 usable addresses, exactly meeting the requirement with the least waste. A /30 provides only 2 usable hosts, while /28 and /27 provide more addresses than needed and waste space.
Question 4Network FundamentalsHard
A point-to-point fiber link between two switches shows a high number of input errors and CRC errors on the interface counters. Which cause is most consistent with these symptoms?
A
A duplex mismatch on a full-duplex fiber link that has no half-duplex negotiation
B
A native VLAN mismatch that has been reported by Cisco Discovery Protocol messages
C
Physical layer problems such as a damaged cable, dirty connector, or failing optic
D
An access control list that is dropping the frames before they reach the interface
Show answer & explanation
Correct answer: C — Physical layer problems such as a damaged cable, dirty connector, or failing optic
CRC and input errors on a clean point-to-point fiber link point to physical-layer issues such as a damaged fiber, a dirty or loose connector, or a failing transceiver. Fiber links run full duplex without the half-duplex collisions a duplex mismatch causes, native VLAN mismatches are a trunk issue, and an ACL drop does not increment CRC error counters.
Question 5Network FundamentalsEasy
An organization moves its email and CRM applications to a provider-hosted environment reachable over the Internet rather than running them in its own building. Which deployment model is this?
A
An on-premises model where applications run on hardware the company owns and operates
B
A spine-leaf model that defines how switches interconnect inside a single data center
C
A SOHO model in which one device delivers routing and switching for a tiny office
D
A cloud model using shared provider infrastructure reached over the Internet
Show answer & explanation
Correct answer: D — A cloud model using shared provider infrastructure reached over the Internet
Consuming applications hosted on a provider platform and reached across the Internet is the cloud deployment model, which shifts hardware ownership and maintenance to the provider. On-premises means the company runs the hardware itself, while spine-leaf and SOHO describe physical topologies rather than hosting models.
Question 6Network FundamentalsMedium
In a 2.4 GHz wireless deployment, which set of channels is considered nonoverlapping in North America to reduce co-channel interference?
A
Channels 1, 2, and 3, which sit directly adjacent and overlap heavily
B
Channels 36, 40, and 44, which belong to the 5 GHz band instead
C
Channels 1, 5, and 9, which partially overlap and still cause interference
D
Channels 1, 6, and 11, which do not overlap in the 2.4 GHz band
Show answer & explanation
Correct answer: D — Channels 1, 6, and 11, which do not overlap in the 2.4 GHz band
In the 2.4 GHz band each channel is 22 MHz wide, so only channels 1, 6, and 11 are spaced far enough apart to avoid overlap in North America. Channels 1-2-3 and 1-5-9 still overlap, and channels 36-40-44 are 5 GHz channels, so they do not answer a 2.4 GHz nonoverlapping question.
Question 7Network FundamentalsHard
Two directly connected switch ports report late collisions and a high rate of runts and FCS errors. Which misconfiguration most likely produces this pattern?
A
Both ports were hard-set to full duplex with matching configured interface speeds
B
A duplex mismatch where one side is full duplex and the other side is half duplex
C
A trunk encapsulation mismatch between 802.1Q and an unsupported legacy method
D
An EtherChannel where both ports use the same LACP mode and channel-group number
Show answer & explanation
Correct answer: B — A duplex mismatch where one side is full duplex and the other side is half duplex
Late collisions combined with runts and FCS errors are the classic signature of a duplex mismatch: the half-duplex side detects collisions while the full-duplex side keeps transmitting, corrupting frames. Matching full-duplex settings, a working EtherChannel, and trunk encapsulation issues do not produce late collisions on a single link.
Question 8Network FundamentalsEasy
A network powers IP phones and access points directly over their Ethernet cabling. Which technology provides electrical power along with data on the same copper cable?
A
Spanning Tree Protocol, which prevents Layer 2 loops by blocking redundant links
B
Power over Ethernet, which supplies DC power and data over the same twisted pair
C
Link Aggregation Control Protocol, which bundles physical links into one channel
D
Quality of Service, which prioritizes voice frames during periods of congestion
Show answer & explanation
Correct answer: B — Power over Ethernet, which supplies DC power and data over the same twisted pair
Power over Ethernet delivers DC power and data simultaneously over the same copper twisted-pair cabling, removing the need for separate power adapters on phones and APs. Spanning Tree prevents loops, LACP bundles links, and QoS prioritizes traffic; none of these deliver electrical power.
Question 9Network FundamentalsMedium
A host is configured with the IP address 172.16.40.10 and mask 255.255.255.0. Which address is the network address of the subnet this host belongs to?
A
172.16.0.0, which would apply to a classful 16-bit network mask instead of the configured /24
B
172.16.40.255, which is the directed broadcast address of this subnet
C
172.16.40.1, which is typically the default gateway rather than the network ID
D
172.16.40.0, found by setting the host bits in the last octet to zero
Show answer & explanation
Correct answer: D — 172.16.40.0, found by setting the host bits in the last octet to zero
With a /24 mask the first three octets are the network portion, so clearing the host bits gives the network address 172.16.40.0. The 172.16.0.0 result assumes a /16 mask, 172.16.40.255 is the subnet broadcast, and 172.16.40.1 is a usable host address commonly used for a gateway, not the network ID.
Question 10Network FundamentalsHard
Using Modified EUI-64, a switch derives an interface ID from the MAC address 00:1A:2B:3C:4D:5E. Which value is the resulting 64-bit interface identifier?
A
001A:2B3C:4D5E:0000, formed by padding the 48-bit MAC on the right with zero bits
B
FF1A:2B3C:4D5E:FFFE, formed by prepending FF and appending FFFE to the MAC value
C
001A:2BFF:FE3C:4D5E, formed by inserting FFFE while leaving the seventh bit unchanged
D
021A:2BFF:FE3C:4D5E, formed by inserting FFFE and flipping the U/L bit
Show answer & explanation
Correct answer: D — 021A:2BFF:FE3C:4D5E, formed by inserting FFFE and flipping the U/L bit
Modified EUI-64 splits the 48-bit MAC, inserts FFFE in the middle, and flips the seventh bit (the universal/local bit) of the first byte, turning 00 into 02 and yielding 021A:2BFF:FE3C:4D5E. Padding with zeros, prepending FF, or skipping the U/L bit flip all violate the EUI-64 procedure.
Want more 200-301 practice questions?
Take the free 200-301 practice test: 30 questions per session with instant explanations. Unlock all 500 questions plus timed exam mode for $11.99 one-time.
CCNA 200-301 is Cisco’s associate-level networking certification. It validates installing, configuring, operating, and troubleshooting routed and switched networks, plus security fundamentals and automation. The exam costs about $300 and runs 120 minutes.
Is CCNA worth it in 2026?
Yes. CCNA remains one of the most respected and in-demand networking certifications. It is a strong foundation for network engineer, NOC, and infrastructure roles and a prerequisite mindset for higher Cisco tracks.
How hard is the CCNA?
CCNA is moderately challenging. It covers broad material and includes configuration and troubleshooting scenarios. Most candidates need 2–3 months of study plus hands-on lab practice (Packet Tracer or real gear).
Do I need experience for CCNA?
Cisco recommends about one year of networking experience, but it is not required. Many candidates pass through dedicated study and lab practice. CCST Networking is a helpful precursor.
How many questions are on the CCNA exam?
The CCNA 200-301 exam has roughly 100–120 questions in a 120-minute window, including multiple-choice, drag-and-drop, and simulation-style items. Cisco does not publish an exact count.
What is the CCNA passing score?
Cisco does not officially publish the CCNA cut score; a value around 825 out of 1000 is widely cited. Aim for a consistent 85%+ on quality practice tests to be safe.
How long does it take to prepare for CCNA?
Most candidates prepare in 2–3 months studying 1–2 hours per day with regular lab time. Prioritize IP connectivity (OSPF, routing), network access (VLANs, trunking, wireless), and security fundamentals.
What topics are on the CCNA 200-301?
Key topics: network fundamentals, switching and VLANs, OSPF and routing, IP services (NAT, DHCP, NTP, QoS), ACLs and security fundamentals, wireless, and network automation with REST APIs and controllers.
How much does the CCNA 200-301 exam cost?
The Cisco CCNA 200-301 exam costs $300 USD, paid when you book through Pearson VUE; some regions add local tax at checkout. The exam has a 120-minute time limit.
Is there a free 200-301 practice test?
Yes. CertSharp offers a free 200-301 practice test for the Cisco CCNA exam: 30 questions per session with detailed explanations, no credit card required. The full 500-question 200-301 bank, including timed exam mode, is $11.99 one-time with lifetime access.