Cisco Certified Network Associate (CCNA) 200-301 Practice Test 24
Question 230
A switching team has repaired a network problem. A faster physical interface is not the root port because its overall advertised root-path cost is larger than the alternative. Which device or protocol check is the strongest evidence that this particular failure is gone?
- Compare only the Ethernet speed labels and assume the faster member is root port without reading path costs.
- Check the root bridge priority only, ignoring which local port actually wins root-port selection.
- `show spanning-tree vlan <id> detail` reports the selected root port and total root path costs, matching the intended least-cost path and documented tie-breakers.
- Verify `show ip route` has a gateway of last resort while the STP root port remains incorrect.
Explanation
Correct Answer
C:The repair concerns path selection, so compare received BPDU root costs plus local port costs on all candidates. PHY speed alone is not a decisive acceptance test.
Incorrect Answers
A:An upstream cost difference may outweigh the local speed contribution.
B:Root election and non-root bridge port selection are related but distinct STP decisions.
D:Layer 3 route presence does not validate Layer 2 path-cost election.
Question 231
A network acceptance test follows this reported failure: Both sides of a redundant loop show forwarding without an alternate/blocking role, and broadcasts circulate continuously. Which verification most specifically demonstrates the repaired function rather than checking an unrelated feature?
- STP output shows a loop-free port-role/state topology: root/designated forwarding as appropriate, redundant alternate discarding, and no continued broadcast storm.
- Every member of the formerly looped ring remains forwarding with no alternate/discarding path.
- Disable all switch uplinks so the network has no traffic or broadcasts.
- Enable a static IP default route but leave the L2 bridging cycle intact.
Explanation
Correct Answer
A:A redundant L2 topology needs an effective blocked or discarding path to break cycles while maintaining connectivity. Inspect the affected VLAN’s actual roles, not just interface carrier.
Incorrect Answers
B:If every redundant ring link forwards in the same Layer 2 topology, no STP alternate port blocks the loop. Broadcast and unknown-unicast frames can circulate and multiply; the check must instead confirm the expected forwarding and discarding roles.
C:A silent network with broken connectivity is not a functional STP repair.
D:A router default route does not prevent Ethernet broadcast frames from circulating in a switched loop.
Question 232
A switching team is validating a repair. Earlier, a redundant alternate port remains discarding even though its cable is healthy; no failure occurred because another path forwards. Which postchange check most directly establishes the specific problem is resolved?
- Force the alternate forwarding immediately while the existing root path remains active, without STP control.
- With the current superior root path healthy, the alternate remains discarding; upon a controlled root-path failure, RSTP converges to a valid alternate forwarding path.
- Mark the healthy alternate link as failed merely because its operational STP state is discarding.
- Accept total loss of VLAN connectivity whenever the active root path fails despite a healthy eligible alternate.
Explanation
Correct Answer
B:The initial discarding backup state was expected, not necessarily a defect. A safe, controlled failover test checks the standby path can transition when required, without ever permitting simultaneous looped forwarding.
Incorrect Answers
A:That can create a Layer 2 loop and is not a proper rapid-convergence test.
C:RSTP deliberately discards backup paths until the topology needs them.
D:A converged redundant topology should restore forwarding on an alternate path if its design supports it.
Question 233
The earlier fault was recorded as follows: A PC takes excessive time to receive DHCP after link-up because its user-facing port waits in ordinary spanning-tree transition. After corrective work, which observation provides direct evidence that the affected function now behaves correctly?
- The interface still waits through normal spanning-tree transition while the PC DHCP process times out.
- The distribution root bridge has the expected MAC, but the workstation port remains non-edge and delayed.
- Disable STP globally to make the PC start faster and ignore redundant loop exposure.
- The genuine host edge interface reports PortFast/edge enabled and transitions to forwarding promptly on link-up while DHCP obtains a valid lease.
Explanation
Correct Answer
D:The prior latency came from normal STP transitional delay on a workstation port. Correct edge behavior plus timely DHCP traffic verifies the targeted fix without changing root selection.
Incorrect Answers
A:On a true host-facing edge, PortFast can move the port into forwarding immediately rather than waiting through normal spanning-tree transitions. A client still timing out during those transitions means the specific edge startup fault was not fixed.
B:Correct root identity does not establish fast edge startup on the affected switchport.
C:Broadly removing loop protection is neither necessary nor an acceptable safe acceptance condition.
Question 234
A switching team has repaired a network problem. A small unauthorized switch is plugged into an edge port; the interface becomes errdisabled and logs a BPDU Guard violation. Which device or protocol check is the strongest evidence that this particular failure is gone?
- Reset the error counter but leave the unauthorized BPDU-sending switch attached with guard disabled.
- Interpret an STP loop-inconsistent message caused by missing BPDUs as proof of BPDU Guard receipt.
- Show only a passing DHCP lease on an unrelated port while the guarded edge port remains errdisabled.
- The interface logs explicitly identify BPDU Guard errdisable on BPDU receipt; after removing the unauthorized switch and recovering safely, the port stays up without further BPDU violations.
Explanation
Correct Answer
D:BPDU Guard is designed to protect an edge switchport by errdisabling it when a BPDU arrives. Validation includes confirming the correct cause, eliminating the source, and observing safe recovered edge operation.
Incorrect Answers
A:That suppresses protection rather than verifying the intended security policy remains effective.
B:Loop Guard missing-BPDU logic and BPDU Guard edge received-BPDU violation are different mechanisms.
C:A different access link cannot demonstrate the affected port’s safe guard operation.
Question 235
A designated uplink on the intended root switch is currently `root-inconsistent` because a downstream test switch advertised a superior BPDU. Root Guard is enabled. After the test switch stops sending superior BPDUs, what is the expected recovery behavior?
- The port permanently remains errdisabled until an administrator removes BPDU Guard and reloads the switch.
- The root-inconsistent block can clear automatically once superior BPDUs stop, allowing normal STP role reevaluation.
- The link immediately becomes an STP root port because that is mandatory for every Root Guard interface.
- Root Guard disables all future BPDU processing and forwards traffic regardless of topology.
Explanation
Correct Answer
B:Cisco documents that Root Guard blocks a designated port in root-inconsistent state while a downstream device sends a superior BPDU. Once those deviant BPDUs stop, normal STP processing can reevaluate the port and the root-inconsistent condition clears automatically. Verify the port state and intended root bridge after the offending switch's priority is corrected. Automatic recovery is appropriate because the trigger no longer exists; it does not mean the downstream configuration should be left unaudited. This behavior contrasts with edge-port BPDU Guard errdisable and with Loop Guard, which responds to missing BPDUs on non-designated ports. Check logs and show spanning-tree details to confirm both the cause and stable postchange topology.
Incorrect Answers
A:BPDU Guard on an edge port can place it in errdisable after unexpected BPDU reception. Root Guard's root-inconsistent response to a superior BPDU is a different condition with different recovery behavior. The scenario explicitly identifies Root Guard, not BPDU Guard, and the documented root-inconsistent state is not automatically a permanent errdisabled state requiring a reload.
C:A Root Guard port on the intended root switch remains a designated downstream boundary when the topology is healthy, not necessarily a root port. Root ports are chosen on nonroot bridges toward the root. The recovery process does not require a designated interface on the root bridge to become a root port; doing so would contradict its position in the tree.
D:Root Guard still participates in spanning-tree control-plane processing. It must recognize superior BPDUs to apply the protection and continues to depend on the actual topology and BPDU reception. Automatically forwarding through any topology would defeat the purpose of Root Guard and risk loops. The feature protects root placement without turning STP off.
Question 236
A switching team must implement a change. A small office AP manages its own radio and WLAN policy locally without joining a central WLC. Which technical decision most directly meets these requirements?
- Deploy a controller-dependent lightweight AP but do not provide any reachable WLC.
- Use an autonomous AP with locally administered SSID, radio settings and security policy; no WLC join is required.
- Set the AP to monitor-only radio mode and expect it to accept ordinary office clients.
- Configure only an Ethernet trunk on the access switch and leave the AP without radio or WLAN policy.
Explanation
Correct Answer
B:Autonomous APs host their own WLAN control functions. Administrators configure them individually or through supporting tools rather than relying on a central controller to push policy.
Incorrect Answers
A:A controller-dependent AP normally needs WLC discovery/join and controller provisioning for managed WLAN service.
C:Monitor radio mode is for RF observation rather than normal client association.
D:Correct uplink VLANs do not provide the standalone AP with SSID, authentication and radio settings.
Question 237
Several lightweight APs get SSID policy from a central wireless LAN controller and form a management control session. The team needs a solution consistent with this requirement. Which option is the most appropriate design or configuration decision?
- Deploy lightweight controller-based APs, enable WLC discovery/reachability, and confirm CAPWAP join before centrally assigning WLAN policy.
- Use autonomous APs with isolated local configuration while expecting WLC-wide policy pushes without joining.
- Disable CAPWAP discovery and place the AP radio in monitor mode to serve all production clients.
- Configure an IP default gateway on the uplink only and assume the controller will centrally manage any radio.
Explanation
Correct Answer
A:Lightweight APs normally form CAPWAP control sessions with a WLC, which supplies and manages SSIDs and configuration. A local DHCP lease alone does not establish that controller association exists.
Incorrect Answers
B:Standalone autonomous operation does not implement the described central WLC control model.
C:This prevents the intended controller-managed client-service behavior.
D:IP reachability is necessary in many designs but not sufficient to prove a CAPWAP control join.
Question 238
A switching team is evaluating a deployment. A remote branch AP should locally switch client traffic to its local VLAN when controller WAN connectivity is intermittent. What approach correctly addresses the stated requirement?
- Force every branch client data packet through a central CAPWAP data tunnel despite predictable WAN outages.
- Use FlexConnect/local-switching mode for appropriate branch WLANs, with client VLANs and required local services available at the branch.
- Set the AP to monitor-only mode and expect it to continue serving client data locally.
- Enable only LLDP on the switch and assume it turns controller-tunneled WLANs into local forwarding.
Explanation
Correct Answer
B:FlexConnect can keep locally switched client data off a fragile WAN tunnel to the central WLC, depending on AP model, WLAN security and survivability configuration. Verify the actual WLAN local-switching policies.
Incorrect Answers
A:That leaves user forwarding dependent on the very WAN path described as unreliable.
C:Monitor-mode radios do not provide normal production association and forwarding.
D:Link discovery does not change FlexConnect versus central data-path selection.
Question 239
A proposed network design has this requirement: An RF survey radio scans channels and reports rogue devices or interference instead of accepting ordinary client associations. Which choice is technically appropriate for that deployment?
- Enable a regular local-mode client SSID and measure only associated client throughput.
- Disable the AP radio and assume it can still receive and classify on-air rogue transmissions.
- Configure a supported AP/radio in monitor mode to scan channels and report rogue or interference observations instead of offering client association.
- Create a routed SVI for the sensor and expect an Ethernet-only gateway to detect 802.11 interference.
Explanation
Correct Answer
C:Wireless monitor radios collect RF data for WLC/RRM/security functions and typically are not serving normal client WLAN traffic. This contrasts with local or centrally switched data AP modes.
Incorrect Answers
A:Client-serving local mode is a different role from a dedicated scanning/monitor sensor.
B:A disabled RF receiver cannot perform the requested survey/monitor observations.
D:A Layer 3 SVI does not act as an RF scanner.
Question 240
A switching team must implement a change. An office deploys cloud-managed Wi-Fi where cloud services administer configuration while working APs can locally forward traffic where supported. Which technical decision most directly meets these requirements?
- Assume every associated client packet must traverse the cloud portal and that Wi-Fi always stops when Internet access fails.
- Use only local autonomous console settings while claiming all WLAN policy and telemetry are centrally cloud managed.
- Use a cloud-managed WLAN platform for configuration/telemetry while confirming that the selected AP supports local client-data forwarding during cloud disconnects.
- Disable the branch Ethernet VLANs because cloud management carries all local client frames by definition.
Explanation
Correct Answer
C:The management control plane can be cloud-hosted while some AP deployments bridge or route user packets locally. Survivability differs by platform, so verify the actual service behavior under a simulated cloud outage.
Incorrect Answers
A:Cloud-managed control does not universally imply cloud-tunneled user data; forwarding design is platform-specific.
B:Standalone local provisioning alone does not implement the requested cloud policy control plane.
D:Local bridging still requires valid LAN uplink/VLAN connectivity where that model is selected.
