Free CCNA 200-301 v2.0 Practice Test

Correct answer: B. The agent gathered evidence with read-only commands, traced the errors to a duplex mismatch and held the change for approval

B is correct because heavy CRC errors on R1 Gi0/2 and half duplex on the neighbor port support a duplex mismatch, and the change waits for a human. A misdescribes agentic AI, which is defined by calling tools such as show commands to gather data. C ignores the guardrail that configuration changes need human approval, even when the evidence looks clear. D would guess at a fix before collecting evidence, and setting half duplex would not be the right correction anyway.

Correct answer: C. 10.0.0.6

C is correct because 10.10.20.0/26 covers only .0 to .63, so the longest prefix that contains .70 is the /24 static route. A would be used only for .0 to .63, because the /26 does not contain 10.10.20.70. B is the less specific /16, which loses to the matching /24. D is the default route, used only when no other entry matches the destination.

Correct answer: C. A damaged cable or electrical interference on the run

C is correct because both ends agree on 1000 Mb/s full duplex and there are no collisions, so CRC errors point to signal corruption on the physical path. A would show runts or late collisions and differing duplex, but both ends report full duplex. B would raise output drops, not CRC errors on received frames. D would increment the giants counter, which is zero here.

Correct answer: B. Type 7 is a reversible encoding, so admin should use secret instead

B is correct because a type 7 string can be decoded back to the clear-text password, while the secret keyword stores a one-way hash such as type 9. A confuses type 7 with type 5, which is the MD5 hash; type 7 is not a hash at all. C is false; the account logs in with either keyword, and the risk is that its password can be recovered. D misreads the line, since the 7 marks an encoded value rather than clear text.

Correct answer: A. Both ends are dynamic auto, so neither side initiates trunking

A is correct because dynamic auto only answers DTP requests, and with auto on both ends no side asks for a trunk, so the link stays access. B would still allow a trunk to form and only produce a CDP native VLAN mismatch message. C is ruled out because both ends report dot1q, which is the only type these switches use. D is ruled out because the output shows Negotiation of Trunking: On.

Correct answer: A. Verify that 10.0.12.1 is a reachable neighbor that knows the 10.50.1.0/24 network before approving the static route

A is correct because the missing route is supported by evidence, but the agent itself flags the next hop as unverified, so it must be checked first. B is too broad; recommending a change for human review is exactly how a guarded agent is meant to work. C widens the change far beyond the evidence and the one router that is missing the route. D ignores the agent's own note that the next hop was never verified with any command.

Correct answer: B. 192.168.1.6

B is correct because 172.16.32.0/20 spans 172.16.32.0 to 172.16.47.255, and it is the longest prefix that contains the destination. A is wrong, because a route only has to contain the destination, not equal it. C is the static /24, which covers only 172.16.40.0 to 172.16.40.255. D has the lower administrative distance, but distance is compared only for the same prefix, not across a /16 and a /20.

Correct answer: C. Fix the violation, then enter shutdown and no shutdown on the port

C is correct because err-disabled means a feature such as port security or BPDU guard shut the port, and it returns only after the cause is removed and the port is bounced. A describes the disabled status; an administratively shut port would show disabled, not err-disabled. B describes the notconnect status; err-disabled is a software shutdown, not a missing link. D would not help, because negotiation failures do not place a port in the err-disabled state.

Correct answer: C. ip domain name example.com

C is correct because the RSA key pair is named from the hostname and domain name, and the hostname is already set, so only the domain name is missing. A is not needed, because the prompt already shows a non-default hostname and the error asks for a domain name. B selects the SSH version but cannot be used meaningfully until a key pair exists. D is a vty line command that restricts protocols and does not affect key generation.

Correct answer: C. The command replaced the allowed list instead of adding VLAN 30

C is correct because without the add keyword the allowed list becomes only VLAN 30, so VLANs 10 and 20 are no longer carried on the trunk. A is ruled out because the port still shows mode on and status trunking. B is wrong because the native VLAN is still 1 and the native VLAN never blocks other VLANs. D is not shown; the allowed list itself no longer contains VLANs 10 and 20.