CCNA 200-301 v2.0 · Original practice content aligned to the official v2.0 exam topics
CCNA v2.0 Practice Questions: Switching and Network Access
Configure switch-to-switch and edge-host ports, validate documentation with CDP/LLDP, and troubleshoot Layer 2/Layer 3 connectivity and Rapid PVST+.
Domain 2.0 is 25% of CCNA v2.0. Topics: 802.1Q trunks, LACP EtherChannel, SVIs, edge ports for phones, APs and virtual hosts (VLAN and PoE), CDP and LLDP, show commands, ping, traceroute and packet captures, and Rapid PVST+ with PortFast, root guard, loop guard and BPDU guard.
CCNA v2.0 starts February 3, 2027 and runs 120 minutes. The current v1.1 exam is available until February 2, 2027.
Domain sample questions with answers
Switching and Network Access
CCNA v2.0 sample question 1
SW1 and SW2 are new switches connected on Gi1/0/1 with factory port settings, and the link does not carry VLAN 20. On SW1, show interfaces GigabitEthernet1/0/1 switchport shows:
Name: Gi1/0/1
Switchport: Enabled
Administrative Mode: dynamic auto
Operational Mode: static access
Administrative Trunking Encapsulation: dot1q
Negotiation of Trunking: On
SW2 shows the same. Why is the link not trunking?
Both ends are dynamic auto, so neither side initiates trunking
The native VLAN differs between the two ends of the link
The two switches disagree on the 802.1Q trunk encapsulation type
DTP has been disabled on the port with switchport nonegotiate
Show correct answer and explanation
Correct answer: A. Both ends are dynamic auto, so neither side initiates trunking
A is correct because dynamic auto only answers DTP requests, and with auto on both ends no side asks for a trunk, so the link stays access. B would still allow a trunk to form and only produce a CDP native VLAN mismatch message. C is ruled out because both ends report dot1q, which is the only type these switches use. D is ruled out because the output shows Negotiation of Trunking: On.
Switching and Network Access
CCNA v2.0 sample question 2
An engineer entered switchport trunk allowed vlan 30 on SW1 Gi1/0/24 to carry a new VLAN, and users in VLANs 10 and 20 immediately lost connectivity across the uplink. SW1 show interfaces trunk shows:
Port Mode Encapsulation Status Native vlan
Gi1/0/24 on 802.1q trunking 1
Port Vlans allowed on trunk
Gi1/0/24 30
What caused the outage?
The trunk dropped to access mode after DTP renegotiated it
VLAN 30 became the native VLAN and blocked the others
The command replaced the allowed list instead of adding VLAN 30
Spanning tree put VLANs 10 and 20 into blocking on the uplink
Show correct answer and explanation
Correct answer: C. The command replaced the allowed list instead of adding VLAN 30
C is correct because without the add keyword the allowed list becomes only VLAN 30, so VLANs 10 and 20 are no longer carried on the trunk. A is ruled out because the port still shows mode on and status trunking. B is wrong because the native VLAN is still 1 and the native VLAN never blocks other VLANs. D is not shown; the allowed list itself no longer contains VLANs 10 and 20.
Switching and Network Access
CCNA v2.0 sample question 3
The design standard uses VLAN 99 as the native VLAN on all trunks. SW1 logs the following message:
%CDP-4-NATIVE_VLAN_MISMATCH: Native VLAN mismatch discovered on GigabitEthernet1/0/1 (1), with SW2 GigabitEthernet1/0/1 (99).
Which command should the engineer enter under SW1 GigabitEthernet1/0/1?
switchport trunk native vlan 99
switchport voice vlan 99
switchport access vlan 99
switchport trunk allowed vlan add 99
Show correct answer and explanation
Correct answer: A. switchport trunk native vlan 99
A is correct because the message shows SW1 uses native VLAN 1 while SW2 uses 99, so setting SW1 to 99 matches the standard and the neighbor. B configures a voice VLAN for IP phones and has nothing to do with the trunk native VLAN. C sets the VLAN used in access mode and does not change the native VLAN of a trunk. D only permits VLAN 99 on the trunk and leaves SW1's native VLAN at 1.
Switching and Network Access
CCNA v2.0 sample question 4
SW1 and SW2 both have channel-group 1 mode passive on Gi1/0/1 and Gi1/0/2. On SW1, show etherchannel summary shows:
Group Port-channel Protocol Ports
1 Po1(SD) LACP Gi1/0/1(I) Gi1/0/2(I)
Which change will bring up the EtherChannel?
Change the ports on SW1 only to channel-group 1 mode on
Add switchport nonegotiate to the member ports on both sides
Change the ports on SW1 to channel-group 1 mode desirable
Change the ports on either switch to channel-group 1 mode active
Show correct answer and explanation
Correct answer: D. Change the ports on either switch to channel-group 1 mode active
D is correct because passive ports only answer LACPDUs, so one side must be active to start negotiation and bundle the links. A would not form a channel, because mode on sends no LACPDUs to the passive ports. B stops DTP, which has no part in LACP bundling. C desirable is a PAgP mode and cannot negotiate with LACP passive ports on SW2.
Switching and Network Access
CCNA v2.0 sample question 5
On SW1, Gi1/0/3 was added to an existing LACP bundle, but it has speed 100 configured while the other members run at 1000 Mb/s. show etherchannel summary shows:
Group Port-channel Protocol Ports
1 Po1(SU) LACP Gi1/0/1(P) Gi1/0/2(P) Gi1/0/3(s)
What is the status of Gi1/0/3?
Hot-standby, waiting for one of the active members to fail
Suspended, because its settings do not match the other members
Down, because the cable to SW2 is unplugged
Stand-alone, because it is receiving no LACPDUs from SW2
Show correct answer and explanation
Correct answer: B. Suspended, because its settings do not match the other members
B is correct because the (s) flag means suspended, which happens when a port's speed, duplex or switchport settings differ from the bundle. A would show the (H) flag, and only appears when more than eight ports are in an LACP group. C would show the (D) flag rather than (s). D would show the (I) flag rather than (s).
Switching and Network Access
CCNA v2.0 sample question 6
A new SVI was added for VLAN 30 on DSW1. show vlan brief lists only VLANs 1, 10 and 20, and show ip interface brief shows:
Interface IP-Address OK? Method Status Protocol
Vlan10 10.10.0.1 YES manual up up
Vlan20 10.20.0.1 YES manual up up
Vlan30 10.30.0.1 YES manual up down
What is the most likely reason Vlan30 is not up/up?
The Vlan30 interface is shut down
VLAN 30 has not been created in the VLAN database
ip routing is disabled on DSW1
The Vlan30 address overlaps with another SVI subnet
Show correct answer and explanation
Correct answer: B. VLAN 30 has not been created in the VLAN database
B is correct because an SVI stays up/down until its VLAN exists on the switch and has an active port, and VLAN 30 is missing from show vlan brief. A would show administratively down in the Status column rather than up. C affects routing between VLANs but does not change the line protocol state of an SVI. D is not the case, because 10.30.0.0 does not overlap 10.10.0.0 or 10.20.0.0.
Switching and Network Access
CCNA v2.0 sample question 7
Hosts in VLAN 10 can ping their gateway 10.10.0.1 on DSW1 and hosts in VLAN 20 can ping 10.20.0.1, but hosts cannot reach the other VLAN. The DSW1 running configuration shows:
no ip routing
interface Vlan10
ip address 10.10.0.1 255.255.255.0
interface Vlan20
ip address 10.20.0.1 255.255.255.0
What should the engineer configure?
The switchport mode trunk command on the host-facing ports
The ip default-gateway command pointing to 10.10.0.1
The no switchport command under each SVI interface
The ip routing global configuration command
Show correct answer and explanation
Correct answer: D. The ip routing global configuration command
D is correct because the SVIs are up and reachable, but no ip routing means DSW1 will not forward packets between them. A would break the access ports and does nothing to enable routing. B only sets a gateway for the switch's own traffic and does not route between VLANs. C is not valid on an SVI, which is already a Layer 3 interface.
Switching and Network Access
CCNA v2.0 sample question 8
R1 provides router-on-a-stick routing for VLANs 10 and 20 over a trunk to SW1. Hosts in VLAN 10 reach their gateway, but hosts in VLAN 20 cannot reach 10.20.0.1. R1 shows:
interface GigabitEthernet0/0.10
encapsulation dot1Q 10
ip address 10.10.0.1 255.255.255.0
interface GigabitEthernet0/0.20
encapsulation dot1Q 30
ip address 10.20.0.1 255.255.255.0
What is the problem?
Subinterface Gi0/0.20 is tagging frames for VLAN 30 rather than VLAN 20
The physical interface needs its own IP address in VLAN 20
Gi0/0.20 needs the native keyword on its encapsulation command
The subinterface number must equal the VLAN ID for routing to work
Show correct answer and explanation
Correct answer: A. Subinterface Gi0/0.20 is tagging frames for VLAN 30 rather than VLAN 20
A is correct because the encapsulation dot1Q value must match the VLAN ID, so Gi0/0.20 never receives the VLAN 20 frames from SW1. B is not required; the physical interface stays unaddressed in router-on-a-stick designs. C would make VLAN 30 untagged and still not match VLAN 20. D is only a naming convention; the encapsulation command sets the VLAN, not the subinterface number.
Switching and Network Access
CCNA v2.0 sample question 9
R1 routes VLANs 10, 20 and 30 with subinterfaces on Gi0/0, which connects to SW1 Gi1/0/48. Only VLAN 10 hosts can reach their gateway. On SW1, show interfaces GigabitEthernet1/0/48 switchport shows:
Correct answer: D. Configure Gi1/0/48 with switchport mode trunk
D is correct because the port is an access port in VLAN 10, so only VLAN 10 frames reach R1, and a trunk is needed to carry all three VLANs. A adds a voice VLAN for IP phones and is not a way to connect a router-on-a-stick. B would move the port to VLAN 20 and break VLAN 10 instead of carrying all VLANs. C would make the port a routed port that cannot carry tagged frames to R1 subinterfaces.
Switching and Network Access
CCNA v2.0 sample question 10
An engineer tries to address a link from DSW1 to an upstream router and sees the following:
DSW1(config)# interface GigabitEthernet1/0/48
DSW1(config-if)# ip address 10.0.0.1 255.255.255.252
% IP addresses may not be configured on L2 links.
What must the engineer enter first under the interface?
no switchport
switchport mode trunk
ip routing
no shutdown
Show correct answer and explanation
Correct answer: A. no switchport
A is correct because the port is still a Layer 2 switch port, and no switchport converts it to a routed port that accepts an IP address. B keeps the port at Layer 2, so the address would still be rejected. C is a global command and does not change the port from Layer 2 to Layer 3. D enables the port but does not make it a routed interface.
FlashGenius is an independent practice resource, not Cisco. These are original practice questions written against the official CCNA 200-301 v2.0 exam topics, not exam dumps. Your result is practice accuracy, not an official score.