200-301 Cisco Implementing and Administering Cisco Solutions (200-301 CCNA) v1.1 Free Practice Exam Questions (2026 Updated)

Accept: application/json. Automation questions require separating controller roles, API direction, data formats, HTTP behavior, and configuration-management tooling. Cisco CCNA 200-301 v1.1 includes this topic under Automation and Programmability, so the answer must be validated against normal Cisco device behavior and the operational wording of the scenario. The key is not simply recognizing a familiar acronym; it is identifying what the feature does, where it is configured, and what result it produces. The incorrect options mix northbound and southbound communication, confuse data serialization with transport, or describe traditional device-by-device management. In a real network, selecting the wrong option would either leave the feature nonfunctional, create a forwarding or security gap, or send troubleshooting in the wrong direction. The selected answer is the only one that matches the stated requirement and the way Cisco switching, routing, services, security, wireless, or automation functions are expected to operate. This is why the verified answer remains the best technical choice for the question.

Answer C is the technically correct selection. TACACS+ separates authentication, authorization, and accounting, while RADIUS commonly combines authentication and authorization. TACACS+ also encrypts more of the packet payload than RADIUS, but the answer choice that states only password encryption for TACACS+ reverses the facts. This aligns with Cisco CCNA 200-301 v1.1 because the exam blueprint requires engineers to recognize operational behaviour from configuration symptoms and topology requirements. Command accounting is usually stronger with TACACS+ for device administration, making C the correct comparison. Treat the distractors carefully: most are real Cisco terms, but they solve a different problem or operate at a different layer. The selected answer is the one that would be used by an engineer on the device or in the design to produce the outcome stated in the question.

Answer C is the technically correct selection. IPsec tunnel mode with ESP encapsulates and encrypts the original IP packet for site-to-site VPN use. Tunnel mode wraps the entire inner packet with a new outer IP header, while ESP provides confidentiality and integrity protection for the protected payload. This aligns with Cisco CCNA 200-301 v1.1 because the exam blueprint requires engineers to recognize operational behaviour from configuration symptoms and topology requirements. AH does not provide encryption, and transport mode protects only the transport payload rather than the whole original packet. Treat the distractors carefully: most are real Cisco terms, but they solve a different problem or operate at a different layer. The selected answer is the one that would be used by an engineer on the device or in the design to produce the outcome stated in the question.

used without tracking or registration. The scenario should be solved by matching the described behavior to the Cisco feature that actually performs it. Cisco CCNA 200-301 v1.1 includes this topic under Network Fundamentals, so the answer must be validated against normal Cisco device behavior and the operational wording of the scenario. The key is not simply recognizing a familiar acronym; it is identifying what the feature does, where it is configured, and what result it produces. The other options are real networking terms or plausible phrases, but they operate at a different layer, solve a different problem, or do not create the outcome described. In a real network, selecting the wrong option would either leave the feature nonfunctional, create a forwarding or security gap, or send troubleshooting in the wrong direction. The selected answer is the only one that matches the stated requirement and the way Cisco switching, routing, services, security, wireless, or automation functions are expected to operate. This is why the verified answer remains the best technical choice for the question.

Answer the displayed drag-and-drop sequence is the technically correct selection. The secure enable configuration sequence enters privileged configuration mode and sets an encrypted enable secret. When a local user database already exists, the remaining task is to configure privileged access securely rather than store a plaintext enable password. This aligns with Cisco CCNA 200-301 v1.1 because the exam blueprint requires engineers to recognize operational behaviour from configuration symptoms and topology requirements. enable password is weaker than enable secret, and line-password steps do not create the encrypted enable credential. Treat the distractors carefully: most are real Cisco terms, but they solve a different problem or operate at a different layer. The selected answer is the one that would be used by an engineer on the device or in the design to produce the outcome stated in the question.

The correct response is B. Unused switch ports should be placed into an unused black-hole VLAN and administratively shut down where possible. Moving unused ports away from active user and native VLANs limits accidental or malicious network access. For Cisco CCNA 200-301 v1.1, the important point is the mechanism, not a generic description of the technology. Putting unused ports in the native or default VLAN leaves an unnecessary attack surface. When this appears in a network, the symptom normally confirms the answer: the route installed, the state selected, the packet forwarded, the wireless client behaviour, or the management workflow will follow this rule. That is why this answer is the best fit for the scenario and not just a plausible networking term.

active. Switching features such as trunks and EtherChannels are controlled by negotiation mode, encapsulation, VLAN membership, and whether the selected protocol is Cisco proprietary or standards based. Cisco CCNA 200-301 v1.1 includes this topic under Network Access, so the answer must be validated against normal Cisco device behavior and the operational wording of the scenario. The key is not simply recognizing a familiar acronym; it is identifying what the feature does, where it is configured, and what result it produces. The incorrect options either disable negotiation, select the wrong negotiation protocol, or configure a mode that cannot form the requested link under the stated conditions. In a real network, selecting the wrong option would either leave the feature nonfunctional, create a forwarding or security gap, or send troubleshooting in the wrong direction. The selected answer is the only one that matches the stated requirement and the way Cisco switching, routing, services, security, wireless, or automation functions are expected to operate. This is why the verified answer remains the best technical choice for the question.

Router3. The scenario should be solved by matching the described behavior to the Cisco feature that actually performs it. Cisco CCNA 200-301 v1.1 includes this topic under IP Connectivity, so the answer must be validated against normal Cisco device behavior and the operational wording of the scenario. The key is not simply recognizing a familiar acronym; it is identifying what the feature does, where it is configured, and what result it produces. The other options are real networking terms or plausible phrases, but they operate at a different layer, solve a different problem, or do not create the outcome described. In a real network, selecting the wrong option would either leave the feature nonfunctional, create a forwarding or security gap, or send troubleshooting in the wrong direction. The selected answer is the only one that matches the stated requirement and the way Cisco switching, routing, services, security, wireless, or automation functions are expected to operate. This is why the verified answer remains the best technical choice for the question.

in the binding database. IP services questions test the exact function of infrastructure services such as addressing, name resolution, time synchronization, logging, monitoring, and secure management. Cisco CCNA 200-301 v1.1 includes this topic under Network Access, so the answer must be validated against normal Cisco device behavior and the operational wording of the scenario. The key is not simply recognizing a familiar acronym; it is identifying what the feature does, where it is configured, and what result it produces. The distractors name valid services, but they provide a different service function from the one required in the prompt. In a real network, selecting the wrong option would either leave the feature nonfunctional, create a forwarding or security gap, or send troubleshooting in the wrong direction. The selected answer is the only one that matches the stated requirement and the way Cisco switching, routing, services, security, wireless, or automation functions are expected to operate. This is why the verified answer remains the best technical choice for the question.

HTTPS. Wireless designs depend on the correct access point mode, WLAN security method, controller function, RF band behavior, and client authentication process. Cisco CCNA 200-301 v1.1 includes this topic under Network Access, so the answer must be validated against normal Cisco device behavior and the operational wording of the scenario. The key is not simply recognizing a familiar acronym; it is identifying what the feature does, where it is configured, and what result it produces. The wrong options confuse authentication with encryption, autonomous behavior with controller-based operation, or management functions with client data forwarding. In a real network, selecting the wrong option would either leave the feature nonfunctional, create a forwarding or security gap, or send troubleshooting in the wrong direction. The selected answer is the only one that matches the stated requirement and the way Cisco switching, routing, services, security, wireless, or automation functions are expected to operate. This is why the verified answer remains the best technical choice for the question.

Use D for this item. Low-latency queuing is the appropriate prioritization method for interactive voice and video. LLQ adds a strict priority queue to class-based queuing so delay-sensitive traffic is serviced quickly during congestion. In Cisco CCNA 200-301 v1.1, IP Services questions frequently test the practical boundary between similar features: what the feature does, where it is configured, and what problem it is meant to solve. Round-robin scheduling is fairer but not strict enough for voice, and policing can drop traffic rather than prioritize it. A clean way to validate the answer is to map the wording of the scenario to the actual device function. If the feature supplies addressing, forwarding, authentication, trunking, route selection, or controller communication, the answer must match that function exactly rather than a nearby protocol name.

Use B and C for this item. An Ansible automation uses playbooks and tasks to define work such as configuring a VLAN. The playbook organizes the automation, while tasks call modules or commands to produce the desired configuration on managed devices. In Cisco CCNA 200-301 v1.1, Automation and Programmability questions frequently test the practical boundary between similar features: what the feature does, where it is configured, and what problem it is meant to solve. Cookbooks and recipes are Chef terms, and a model is not the Ansible component required here. A clean way to validate the answer is to map the wording of the scenario to the actual device function. If the feature supplies addressing, forwarding, authentication, trunking, route selection, or controller communication, the answer must match that function exactly rather than a nearby protocol name.

Use B for this item. VLAN hopping is mitigated by manually configuring trunk ports and disabling Dynamic Trunking Protocol where trunks are not needed. This prevents an attacker from negotiating an unauthorized trunk from an access port. In Cisco CCNA 200-301 v1.1, Network Access questions frequently test the practical boundary between similar features: what the feature does, where it is configured, and what problem it is meant to solve. DAI protects ARP, activating unused default-VLAN ports is unsafe, and extended VLANs do not stop hopping attacks. A clean way to validate the answer is to map the wording of the scenario to the actual device function. If the feature supplies addressing, forwarding, authentication, trunking, route selection, or controller communication, the answer must match that function exactly rather than a nearby protocol name.

Device(Config)#lldp run. The scenario should be solved by matching the described behavior to the Cisco feature that actually performs it. Cisco CCNA 200-301 v1.1 includes this topic under Network Access, so the answer must be validated against normal Cisco device behavior and the operational wording of the scenario. The key is not simply recognizing a familiar acronym; it is identifying what the feature does, where it is configured, and what result it produces. The other options are real networking terms or plausible phrases, but they operate at a different layer, solve a different problem, or do not create the outcome described. In a real network, selecting the wrong option would either leave the feature nonfunctional, create a forwarding or security gap, or send troubleshooting in the wrong direction. The selected answer is the only one that matches the stated requirement and the way Cisco switching, routing, services, security, wireless, or automation functions are expected to operate. This is why the verified answer remains the best technical choice for the question.

VLAN tagging. Switching behavior depends on VLAN tagging, trunk negotiation, STP role selection, EtherChannel mode, and whether a protocol is standards-based or Cisco-specific. Cisco CCNA 200-301 v1.1 includes this under Network Access, where the exam expects engineers to recognize the device behavior that actually produces the required outcome. The question is best solved by reading the operational clue rather than choosing a familiar acronym. Incorrect options change existing VLAN reachability, use the wrong negotiation behavior, or apply a feature to the wrong switch function. In a production network, the wrong choice would normally create an outage, leave a management or security gap, or send troubleshooting toward the wrong subsystem. The selected answer is the one that matches the control-plane, data-plane, wireless, security, services, or automation mechanism described in the question. That is why it remains the verified answer for this item.

Password complexity enable. Security questions require separating identity, authorization, accounting, encryption, management access, and physical protection. Cisco CCNA 200-301 v1.1 includes this under Security Fundamentals, where the expected skill is identifying the mechanism that actually satisfies the scenario. The wording usually gives the decisive clue: a protocol number, a route prefix, a control-plane role, a wireless security method, or a management command. The distractors protect a different surface or represent weaker/deprecated methods. In a real network, selecting the wrong option would usually produce a failed adjacency, broken client connectivity, insecure management access, or an incorrect forwarding path. The selected answer matches the Cisco behavior and configuration model required by the question, so it is retained as the verified answer for this item.

Answer B,E is correct: B. crypto key generate rsa; E. username cisco password 0 Cisco. Cisco routers select forwarding paths by longest-prefix match first, then administrative distance and metric when comparable routes compete. Cisco CCNA 200-301 v1.1 includes this under IP Connectivity, where the exam expects engineers to recognize the device behavior that actually produces the required outcome. The question is best solved by reading the operational clue rather than choosing a familiar acronym. The wrong choices either do not match the destination, use the wrong next hop, or fail to provide the intended primary/backup behavior. In a production network, the wrong choice would normally create an outage, leave a management or security gap, or send troubleshooting toward the wrong subsystem. The selected answer is the one that matches the control-plane, data-plane, wireless, security, services, or automation mechanism described in the question. That is why it remains the verified answer for this item.

Answer B,E is correct: B. Select WPA+WPA2 on Layer 2 Security; E. Select 802.1X from under Authentication Key Management. Cisco forwarding uses longest-prefix match first, then administrative distance and metric when multiple sources compete. Cisco CCNA 200-301 v1.1 includes this under Network Access, where the expected skill is identifying the mechanism that actually satisfies the scenario. The wording usually gives the decisive clue: a protocol number, a route prefix, a control-plane role, a wireless security method, or a management command. Wrong choices either do not match the destination prefix, point to the wrong next hop, or fail to create the required primary or backup route. In a real network, selecting the wrong option would usually produce a failed adjacency, broken client connectivity, insecure management access, or an incorrect forwarding path. The selected answer matches the Cisco behavior and configuration model required by the question, so it is retained as the verified answer for this item.

DHCP relay agent. Infrastructure services must be identified by their exact function: monitoring, time, address assignment, file transfer, logging, or traffic treatment. Cisco CCNA 200-301 v1.1 includes this under IP Services, where the exam expects engineers to recognize the device behavior that actually produces the required outcome. The question is best solved by reading the operational clue rather than choosing a familiar acronym. The distractors name real services, but those services do not perform the action requested in the prompt. In a production network, the wrong choice would normally create an outage, leave a management or security gap, or send troubleshooting toward the wrong subsystem. The selected answer is the one that matches the control-plane, data-plane, wireless, security, services, or automation mechanism described in the question. That is why it remains the verified answer for this item.

PQ. Infrastructure services must be identified by their exact function: monitoring, time, address assignment, file transfer, logging, or traffic treatment. Cisco CCNA 200-301 v1.1 includes this under IP Services, where the exam expects engineers to recognize the device behavior that actually produces the required outcome. The question is best solved by reading the operational clue rather than choosing a familiar acronym. The distractors name real services, but those services do not perform the action requested in the prompt. In a production network, the wrong choice would normally create an outage, leave a management or security gap, or send troubleshooting toward the wrong subsystem. The selected answer is the one that matches the control-plane, data-plane, wireless, security, services, or automation mechanism described in the question. That is why it remains the verified answer for this item.

Cisco CCNA 200-301 v1.1 Network Fundamentals questions of this type test whether each item is matched to the technology that actually performs that role. The reliable method is to classify each term by operating layer, packet behavior, management function, or security purpose before matching it. Several terms in these items are legitimate Cisco networking concepts, but they become wrong when assigned to the wrong protocol or plane. The mapping retained in the document follows that separation: transport behavior is matched to TCP or UDP, wireless or security terms are matched to their mechanisms, and automation items are matched to the correct API or management model. This matters operationally because troubleshooting fails quickly when a forwarding-plane function is treated as a management-plane feature or when a security control is applied to the wrong threat. The shown mapping is therefore retained as the verified response.

Cisco CCNA 200-301 v1.1 Network Fundamentals questions of this type test whether each item is matched to the technology that actually performs that role. The reliable method is to classify each term by operating layer, packet behavior, management function, or security purpose before matching it. Several terms in these items are legitimate Cisco networking concepts, but they become wrong when assigned to the wrong protocol or plane. The mapping retained in the document follows that separation: transport behavior is matched to TCP or UDP, wireless or security terms are matched to their mechanisms, and automation items are matched to the correct API or management model. This matters operationally because troubleshooting fails quickly when a forwarding-plane function is treated as a management-plane feature or when a security control is applied to the wrong threat. The shown mapping is therefore retained as the verified response.

Answer B,C is correct: B. when the cable length limits are exceeded; C. when one side of the connection is configured for half-duplex. The answer follows directly from normal Cisco device behavior and the wording of the scenario. Cisco CCNA 200-301 v1.1 includes this under Network Fundamentals, where the exam expects engineers to recognize the device behavior that actually produces the required outcome. The question is best solved by reading the operational clue rather than choosing a familiar acronym. The other choices are either adjacent technologies, wrong-layer functions, or settings that would not produce the stated result. In a production network, the wrong choice would normally create an outage, leave a management or security gap, or send troubleshooting toward the wrong subsystem. The selected answer is the one that matches the control-plane, data-plane, wireless, security, services, or automation mechanism described in the question. That is why it remains the verified answer for this item.

F0/0. Cisco routers select forwarding paths by longest-prefix match first, then administrative distance and metric when comparable routes compete. Cisco CCNA 200-301 v1.1 includes this under IP Connectivity, where the exam expects engineers to recognize the device behavior that actually produces the required outcome. The question is best solved by reading the operational clue rather than choosing a familiar acronym. The wrong choices either do not match the destination, use the wrong next hop, or fail to provide the intended primary/backup behavior. In a production network, the wrong choice would normally create an outage, leave a management or security gap, or send troubleshooting toward the wrong subsystem. The selected answer is the one that matches the control-plane, data-plane, wireless, security, services, or automation mechanism described in the question. That is why it remains the verified answer for this item.

10.56.0.1. Cisco forwarding uses longest-prefix match first, then administrative distance and metric when multiple sources compete. Cisco CCNA 200-301 v1.1 includes this under Network Access, where the expected skill is identifying the mechanism that actually satisfies the scenario. The wording usually gives the decisive clue: a protocol number, a route prefix, a control-plane role, a wireless security method, or a management command. Wrong choices either do not match the destination prefix, point to the wrong next hop, or fail to create the required primary or backup route. In a real network, selecting the wrong option would usually produce a failed adjacency, broken client connectivity, insecure management access, or an incorrect forwarding path. The selected answer matches the Cisco behavior and configuration model required by the question, so it is retained as the verified answer for this item.

static. The answer follows directly from normal Cisco device behavior and the wording of the scenario. Cisco CCNA 200-301 v1.1 includes this under Network Access, where the exam expects engineers to recognize the device behavior that actually produces the required outcome. The question is best solved by reading the operational clue rather than choosing a familiar acronym. The other choices are either adjacent technologies, wrong-layer functions, or settings that would not produce the stated result. In a production network, the wrong choice would normally create an outage, leave a management or security gap, or send troubleshooting toward the wrong subsystem. The selected answer is the one that matches the control-plane, data-plane, wireless, security, services, or automation mechanism described in the question. That is why it remains the verified answer for this item.

move frames between endpoints limited to IP addresses. Switching behavior depends on VLAN tagging, trunk negotiation, STP role selection, EtherChannel mode, and whether a protocol is standards-based or Cisco-specific. Cisco CCNA 200-301 v1.1 includes this under Network Fundamentals, where the exam expects engineers to recognize the device behavior that actually produces the required outcome. The question is best solved by reading the operational clue rather than choosing a familiar acronym. Incorrect options change existing VLAN reachability, use the wrong negotiation behavior, or apply a feature to the wrong switch function. In a production network, the wrong choice would normally create an outage, leave a management or security gap, or send troubleshooting toward the wrong subsystem. The selected answer is the one that matches the control-plane, data-plane, wireless, security, services, or automation mechanism described in the question. That is why it remains the verified answer for this item.

Cisco CCNA 200-301 v1.1 Network Access questions of this type test whether each protocol, component, address type, or management concept is matched to its correct operating role. The safe method is to classify every item by function: what it does, where it operates, and what problem it solves. Several distractors are usually valid networking terms, but they belong to a different layer or a different operational workflow. The shown mapping keeps those boundaries straight and avoids assigning a feature to the wrong technology. In practice, this same skill is required when troubleshooting because confusing a management-plane function with a forwarding-plane function, or a wireless security feature with an authentication feature, leads to incorrect fixes. The mapping shown in the file is therefore retained and explained as the verified selection.

Answer A,B is correct: A. They enable automatic failover of the default gateway.; B. They allow multiple devices to serve as a single virtual gateway for clients in the network.. The answer follows directly from normal Cisco device behavior and the wording of the scenario. Cisco CCNA 200-301 v1.1 includes this under Network Fundamentals, where the exam expects engineers to recognize the device behavior that actually produces the required outcome. The question is best solved by reading the operational clue rather than choosing a familiar acronym. The other choices are either adjacent technologies, wrong-layer functions, or settings that would not produce the stated result. In a production network, the wrong choice would normally create an outage, leave a management or security gap, or send troubleshooting toward the wrong subsystem. The selected answer is the one that matches the control-plane, data-plane, wireless, security, services, or automation mechanism described in the question. That is why it remains the verified answer for this item.

Router2(config)#ntp master 4. If Router1 is configured as an NTP client using the ntp server command, Router2 must provide time as an NTP server. On Cisco IOS, the command ntp master with an optional stratum value configures a router to act as an authoritative NTP source for other devices. The command ntp server points a device toward another time source; it does not make that device the server for Router1. Cisco CCNA 200-301 v1.1 IP Services requires candidates to separate NTP client configuration from NTP server behavior. In this scenario, Router1 already references 192.168.0.3 as its time source. Router2 must therefore be configured as the local master clock, and stratum 4 is a valid configured stratum. The correct configuration is ntp master 4.

link flapping. The answer follows directly from normal Cisco device behavior and the wording of the scenario. Cisco CCNA 200-301 v1.1 includes this under Network Access, where the exam expects engineers to recognize the device behavior that actually produces the required outcome. The question is best solved by reading the operational clue rather than choosing a familiar acronym. The other choices are either adjacent technologies, wrong-layer functions, or settings that would not produce the stated result. In a production network, the wrong choice would normally create an outage, leave a management or security gap, or send troubleshooting toward the wrong subsystem. The selected answer is the one that matches the control-plane, data-plane, wireless, security, services, or automation mechanism described in the question. That is why it remains the verified answer for this item.

ip route 172.21.34.0 255.255.255.128 10.73.65.66. Cisco routers select forwarding paths by longest-prefix match first, then administrative distance and metric when comparable routes compete. Cisco CCNA 200-301 v1.1 includes this under IP Connectivity, where the exam expects engineers to recognize the device behavior that actually produces the required outcome. The question is best solved by reading the operational clue rather than choosing a familiar acronym. The wrong choices either do not match the destination, use the wrong next hop, or fail to provide the intended primary/backup behavior. In a production network, the wrong choice would normally create an outage, leave a management or security gap, or send troubleshooting toward the wrong subsystem. The selected answer is the one that matches the control-plane, data-plane, wireless, security, services, or automation mechanism described in the question. That is why it remains the verified answer for this item.

Option C. Cisco forwarding uses longest-prefix match first, then administrative distance and metric when multiple sources compete. Cisco CCNA 200-301 v1.1 includes this under IP Connectivity, where the expected skill is identifying the mechanism that actually satisfies the scenario. The wording usually gives the decisive clue: a protocol number, a route prefix, a control-plane role, a wireless security method, or a management command. Wrong choices either do not match the destination prefix, point to the wrong next hop, or fail to create the required primary or backup route. In a real network, selecting the wrong option would usually produce a failed adjacency, broken client connectivity, insecure management access, or an incorrect forwarding path. The selected answer matches the Cisco behavior and configuration model required by the question, so it is retained as the verified answer for this item.

Option. The correct OSPF configuration must satisfy all three stated constraints at the same time. First, R1 must use a router ID of 10.1.1.1, which is supported by the loopback address and router-id setting in the option. Second, R1 must never participate in a DR election, so the FastEthernet interface must use ip ospf priority 0. Third, R1 must form an OSPF relationship only with R2, which is addressed by the access list permitting OSPF protocol 89 from host 10.100.1.2 to 224.0.0.5 while denying other traffic. Cisco CCNA 200-301 v1.1 IP Connectivity expects engineers to combine OSPF adjacency requirements, DR election behavior, and control-plane filtering. Options with priority 100 make R1 likely to become DR, and options with broader ACLs fail the neighbor-restriction requirement. Therefore Option B is the verified configuration.

Change the channel-group mode on SW1 to active or passive.. Switching behavior is determined by MAC learning, VLAN membership, trunk state, port security, and EtherChannel negotiation. Cisco CCNA 200-301 v1.1 includes this under Network Access, where the expected skill is identifying the mechanism that actually satisfies the scenario. The wording usually gives the decisive clue: a protocol number, a route prefix, a control-plane role, a wireless security method, or a management command. The incorrect choices either alter the wrong interface behavior or confuse access-layer switching with routing or security services. In a real network, selecting the wrong option would usually produce a failed adjacency, broken client connectivity, insecure management access, or an incorrect forwarding path. The selected answer matches the Cisco behavior and configuration model required by the question, so it is retained as the verified answer for this item.

to provide link redundancy and load balancing. Switching behavior depends on VLAN tagging, trunk negotiation, STP role selection, EtherChannel mode, and whether a protocol is standards-based or Cisco-specific. Cisco CCNA 200-301 v1.1 includes this under Network Access, where the exam expects engineers to recognize the device behavior that actually produces the required outcome. The question is best solved by reading the operational clue rather than choosing a familiar acronym. Incorrect options change existing VLAN reachability, use the wrong negotiation behavior, or apply a feature to the wrong switch function. In a production network, the wrong choice would normally create an outage, leave a management or security gap, or send troubleshooting toward the wrong subsystem. The selected answer is the one that matches the control-plane, data-plane, wireless, security, services, or automation mechanism described in the question. That is why it remains the verified answer for this item.

Should a monitored port exceeds the maximum administrative value for power, the port is shutdown and err-disabled. Infrastructure services must be identified by their exact function: monitoring, time, address assignment, file transfer, logging, or traffic treatment. Cisco CCNA 200-301 v1.1 includes this under Network Access, where the exam expects engineers to recognize the device behavior that actually produces the required outcome. The question is best solved by reading the operational clue rather than choosing a familiar acronym. The distractors name real services, but those services do not perform the action requested in the prompt. In a production network, the wrong choice would normally create an outage, leave a management or security gap, or send troubleshooting toward the wrong subsystem. The selected answer is the one that matches the control-plane, data-plane, wireless, security, services, or automation mechanism described in the question. That is why it remains the verified answer for this item.

Answer A,D is correct: A. Add or remove an 802.1Q trunking header.; D. Match the destination MAC address to the MAC address table.. The data plane performs packet and frame forwarding work in hardware or forwarding logic. Adding or removing an 802.1Q trunking tag is a forwarding operation, and matching the destination MAC address against the MAC address table is also data-plane switching behavior. NETCONF configuration changes are management-plane activity. Routing protocols run in the control plane because they build reachability information used by the forwarding process. Replying to an ICMP echo request directed at the device itself is device control/management handling, not transit forwarding. Cisco CCNA 200-301 v1.1 Automation and Programmability asks candidates to separate control, data, and management planes because controller-based networking depends on that model. The corrected pair is the 802.1Q header operation and MAC-table lookup.

The destination MAC address of the frame is unknown.. A switch floods a frame when the destination MAC address is unknown in the MAC address table. The switch already learns the source MAC address from the ingress frame, but forwarding requires a destination lookup. If that lookup fails, the switch sends the frame out all ports in the same VLAN except the port on which it arrived. Cisco CCNA 200-301 v1.1 Network Fundamentals expects this exact distinction: unknown unicast flooding is triggered by an unknown destination MAC address, not by an unknown source. Zero destination MAC addresses and identical source/destination addresses are not normal reasons for Ethernet flooding. Once the destination device replies, the switch learns the MAC-to-port mapping and future frames can be forwarded directly. Therefore, the correct answer is that the destination MAC address of the frame is unknown.