Topic 06 Practice Test 1 covers VLANs, Trunks, and Inter-VLAN Connectivity for Cisco Certified Network Associate 200-301 CCNA and maps to objectives 2.1–2.2. For broader exam preparation, review the Cisco CCNA 200-301 Exam Dumps. Every option includes focused technical reasoning explaining both the networking concept and its fit to the scenario.
Question 1
At Aster, a new accounting PC on Gi1/0/12 must send untagged user traffic in VLAN 30. Which interface configuration is the best fit? Choose ONE.
- switchport mode access
switchport access vlan 30 - no switchport
ip address 10.30.0.1 255.255.255.0 - switchport voice vlan 30
- switchport mode trunk
switchport trunk native vlan 30
Correct Answer: A
Correct Answer
Answer A is correct because `switchport mode access` prevents trunk negotiation and `switchport access vlan 30` places untagged frames from the attached endpoint into VLAN 30. At Aster, access VLAN evidence is checked directly. The switchport mode choice at Aster therefore meets the required outcome. At Aster, the access VLAN state is observable afterward.
Incorrect Answers
Answer D is incorrect because A trunk can carry multiple VLANs; setting VLAN 30 native does not make the interface a single-VLAN access port for the PC. At Aster, access VLAN evidence is checked directly. The switchport mode choice at Aster therefore misses the required outcome. At Aster, the access VLAN state is observable afterward.
Answer C is incorrect because `switchport voice vlan 30` identifies a voice VLAN for an attached IP phone while the access VLAN remains separately configured for ordinary endpoint traffic. At Aster, access VLAN evidence is checked directly. The switchport voice choice at Aster therefore misses the required outcome. At Aster, the access VLAN state is observable afterward.
Answer B is incorrect because `no switchport` converts a capable switch port to a routed Layer 3 interface, so it no longer performs the requested Layer 2 access-VLAN function. At Aster, access VLAN evidence is checked directly. The no switchport choice at Aster therefore misses the required outcome. At Aster, the access VLAN state is observable afterward.
Question 2
Delta is connecting an IP phone with a PC daisy-chained behind it. Data must use VLAN 20 and tagged voice traffic must use VLAN 120. Which configuration is appropriate? Choose ONE.
- no switchport
ip address 10.20.0.1 255.255.255.0 - switchport mode access
switchport access vlan 20
switchport voice vlan 120 - switchport mode trunk
switchport trunk allowed vlan 20,120 - switchport access vlan 120
switchport voice vlan 20
Correct Answer: B
Correct Answer
Answer B is correct because An access port can support a data VLAN plus a separate voice VLAN; the phone tags voice frames for VLAN 120 while ordinary PC traffic belongs to access VLAN 20. At Delta, data voice VLAN evidence is checked directly. The switchport mode choice at Delta therefore meets the required outcome. At Delta, the data voice VLAN state is observable afterward.
Incorrect Answers
Answer C is incorrect because A static trunk would expose trunk behavior to the endpoint connection and is not the normal access-plus-voice configuration expected for a Cisco IP phone and attached PC. At Delta, data voice VLAN evidence is checked directly. The switchport mode choice at Delta therefore misses the required outcome. At Delta, the data voice VLAN state is observable afterward.
Answer D is incorrect because Reversing the access and voice VLANs places untagged PC data in VLAN 120 and advertises VLAN 20 to the phone, the opposite of the stated design. At Delta, data voice VLAN evidence is checked directly. The switchport access choice at Delta therefore misses the required outcome. At Delta, the data voice VLAN state is observable afterward.
Answer A is incorrect because A routed port removes Layer 2 VLAN membership and therefore cannot provide the simultaneous access and voice VLAN behavior required here. At Delta, data voice VLAN evidence is checked directly. The no switchport choice at Delta therefore misses the required outcome. At Delta, the data voice VLAN state is observable afterward.
Question 3
Granite needs Gi1/0/47 between two switches to carry VLANs 10, 20, and 30 using 802.1Q. Which command establishes the port’s operational mode as a trunk? Choose ONE.
- switchport mode access
- no switchport
- switchport access vlan 10
- switchport mode trunk
Correct Answer: D
Correct Answer
Answer D is correct because `switchport mode trunk` statically places the Layer 2 interface in trunk mode so it can carry multiple VLANs with 802.1Q tagging. At Granite, static trunk evidence is checked directly. The switchport mode choice at Granite therefore meets the required outcome. At Granite, the static trunk state is observable afterward.
Incorrect Answers
Answer A is incorrect because Access mode carries one access VLAN for ordinary Layer 2 endpoint traffic and does not create the requested multi-VLAN interswitch trunk. At Granite, static trunk evidence is checked directly. The switchport mode choice at Granite therefore misses the required outcome. At Granite, the static trunk state is observable afterward.
Answer C is incorrect because `switchport access vlan 10` selects an access VLAN only when the interface operates as an access port; it does not establish trunking. At Granite, static trunk evidence is checked directly. The switchport access choice at Granite therefore misses the required outcome. At Granite, the static trunk state is observable afterward.
Answer B is incorrect because `no switchport` changes a supported interface into a routed Layer 3 port, removing the Layer 2 trunk function entirely. At Granite, static trunk evidence is checked directly. The no switchport choice at Granite therefore misses the required outcome. At Granite, the static trunk state is observable afterward.
Question 4
Juniper’s trunk already permits VLANs 10 and 20. A new application requires VLAN 30 without removing the existing entries. Which command is safest? Choose ONE.
- switchport trunk allowed vlan 30
- switchport trunk allowed vlan add 30
- switchport access vlan 30
- switchport trunk native vlan 30
Correct Answer: B
Correct Answer
Answer B is correct because The `add` keyword appends VLAN 30 to the existing trunk allowed list instead of replacing the list, preserving VLANs that are already permitted. At Juniper, allowed VLAN evidence is checked directly. The switchport trunk choice at Juniper therefore meets the required outcome. At Juniper, the allowed VLAN state is observable afterward.
Incorrect Answers
Answer A is incorrect because Without `add`, the command defines the allowed list as VLAN 30, which can remove previously permitted VLANs and interrupt their traffic. At Juniper, allowed VLAN evidence is checked directly. The switchport trunk choice at Juniper therefore misses the required outcome. At Juniper, the allowed VLAN state is observable afterward.
Answer C is incorrect because `switchport access vlan 30` applies to access-port VLAN membership; it does not update the VLAN allow list of a trunk. At Juniper, allowed VLAN evidence is checked directly. The switchport access choice at Juniper therefore misses the required outcome. At Juniper, the allowed VLAN state is observable afterward.
Answer D is incorrect because `switchport trunk native vlan 30` changes the native VLAN used for untagged trunk traffic but does not add VLAN 30 to the allowed list as requested. At Juniper, allowed VLAN evidence is checked directly. The switchport trunk choice at Juniper therefore misses the required outcome. At Juniper, the allowed VLAN state is observable afterward.
Question 5
Mesa’s 802.1Q trunk should treat VLAN 99 as the native VLAN on both ends. Which interface command configures that behavior? Choose ONE.
- switchport trunk native vlan 99
- switchport access vlan 99
- switchport trunk allowed vlan 99
- switchport voice vlan 99
Correct Answer: A
Correct Answer
Answer A is correct because `switchport trunk native vlan 99` makes VLAN 99 the native VLAN on the 802.1Q trunk; native VLAN settings should match at both ends of the link. At Mesa, native VLAN evidence is checked directly. The switchport trunk choice at Mesa therefore meets the required outcome. At Mesa, the native VLAN state is observable afterward.
Incorrect Answers
Answer C is incorrect because Allowing VLAN 99 controls whether tagged VLAN 99 traffic can traverse the trunk but does not select which VLAN receives untagged trunk frames. At Mesa, native VLAN evidence is checked directly. The switchport trunk choice at Mesa therefore misses the required outcome. At Mesa, the native VLAN state is observable afterward.
Answer B is incorrect because An access-VLAN command applies to an access port and does not define native-VLAN handling on a trunk. At Mesa, native VLAN evidence is checked directly. The switchport access choice at Mesa therefore misses the required outcome. At Mesa, the native VLAN state is observable afterward.
Answer D is incorrect because A voice-VLAN command is intended for endpoint access ports with IP phones and does not establish an 802.1Q trunk native VLAN. At Mesa, native VLAN evidence is checked directly. The switchport voice choice at Mesa therefore misses the required outcome. At Mesa, the native VLAN state is observable afterward.
Question 6
Pioneer is implementing router-on-a-stick for VLAN 20 on router subinterface Gi0/0.20. Which command binds the subinterface to VLAN 20? Choose ONE.
- ip helper-address 20.20.20.20
- encapsulation ppp
- encapsulation dot1Q 20
- switchport access vlan 20
Correct Answer: C
Correct Answer
Answer C is correct because `encapsulation dot1Q 20` associates the router subinterface with 802.1Q VLAN 20 so tagged frames are accepted and routed through that logical interface. At Pioneer, router subinterface evidence is checked directly. The encapsulation dot1Q choice at Pioneer therefore meets the required outcome. At Pioneer, the router subinterface state is observable afterward.
Incorrect Answers
Answer D is incorrect because `switchport access vlan 20` is a Layer 2 switchport command and is not the router subinterface command that identifies an 802.1Q VLAN. At Pioneer, router subinterface evidence is checked directly. The switchport access choice at Pioneer therefore misses the required outcome. At Pioneer, the router subinterface state is observable afterward.
Answer A is incorrect because `ip helper-address` relays selected UDP broadcasts such as DHCP; it does not identify which VLAN an Ethernet subinterface terminates. At Pioneer, router subinterface evidence is checked directly. The ip helper-address choice at Pioneer therefore misses the required outcome. At Pioneer, the router subinterface state is observable afterward.
Answer B is incorrect because PPP encapsulation is used on point-to-point WAN-style links and does not map an Ethernet router subinterface to an 802.1Q VLAN. At Pioneer, router subinterface evidence is checked directly. The encapsulation ppp choice at Pioneer therefore misses the required outcome. At Pioneer, the router subinterface state is observable afterward.
Question 7
Summit’s multilayer switch must route between SVIs VLAN 10 and VLAN 20. Both SVIs are up/up with valid IP addresses. Which global command enables IPv4 forwarding between them? Choose ONE.
- spanning-tree portfast
- switchport mode trunk
- ip default-gateway 10.10.10.1
- ip routing
Correct Answer: D
Correct Answer
Answer D is correct because `ip routing` enables IPv4 packet forwarding on a multilayer switch so traffic can be routed between directly connected SVIs. At Summit, SVI routing evidence is checked directly. The ip routing choice at Summit therefore meets the required outcome. At Summit, the SVI routing state is observable afterward.
Incorrect Answers
Answer A is incorrect because PortFast changes spanning-tree convergence behavior on edge ports and does not enable Layer 3 forwarding between VLAN interfaces. At Summit, SVI routing evidence is checked directly. The spanning-tree portfast choice at Summit therefore misses the required outcome. At Summit, the SVI routing state is observable afterward.
Answer B is incorrect because Trunk mode is configured on a Layer 2 interface to carry VLANs; it does not globally enable routing between SVIs. At Summit, SVI routing evidence is checked directly. The switchport mode choice at Summit therefore misses the required outcome. At Summit, the SVI routing state is observable afterward.
Answer C is incorrect because `ip default-gateway` is used for management reachability when a switch is not routing; it is not a substitute for enabling Layer 3 forwarding on a multilayer switch. At Summit, SVI routing evidence is checked directly. The ip default-gateway choice at Summit therefore misses the required outcome. At Summit, the SVI routing state is observable afterward.
Question 8
Beacon creates VLAN 40 and assigns access ports to it. Which command is the most direct way to verify VLAN 40 exists and see its access-port membership? Choose ONE.
- show cdp neighbors
- show vlan brief
- show ip route
- show etherchannel summary
Correct Answer: B
Correct Answer
Answer B is correct because `show vlan brief` summarizes VLAN IDs, names, status, and access-port membership, making it the direct verification command for the requested Layer 2 state. At Beacon, VLAN database evidence is checked directly. The show vlan choice at Beacon therefore meets the required outcome. At Beacon, the VLAN database state is observable afterward.
Incorrect Answers
Answer C is incorrect because `show ip route` displays Layer 3 routing information; it does not list access-port membership in VLANs. At Beacon, VLAN database evidence is checked directly. The show ip choice at Beacon therefore misses the required outcome. At Beacon, the VLAN database state is observable afterward.
Answer D is incorrect because `show etherchannel summary` verifies port-channel membership and state rather than VLAN database membership for individual access ports. At Beacon, VLAN database evidence is checked directly. The show etherchannel choice at Beacon therefore misses the required outcome. At Beacon, the VLAN database state is observable afterward.
Answer A is incorrect because `show cdp neighbors` discovers directly connected Cisco devices and provides neighbor details, not the switch’s VLAN membership table. At Beacon, VLAN database evidence is checked directly. The show cdp choice at Beacon therefore misses the required outcome. At Beacon, the VLAN database state is observable afterward.
Question 9
Ember connects a hypervisor that is manually configured for an 802.1Q trunk and does not use DTP. The switch port is already a static trunk. Which command prevents DTP frames from being sent? Choose ONE.
- switchport access vlan 1
- switchport mode dynamic auto
- switchport mode dynamic desirable
- switchport nonegotiate
Correct Answer: D
Correct Answer
Answer D is correct because `switchport nonegotiate` suppresses DTP negotiation frames; paired with static trunk configuration it is appropriate when the peer does not participate in DTP. At Ember, DTP suppression evidence is checked directly. The switchport nonegotiate choice at Ember therefore meets the required outcome. At Ember, the DTP suppression state is observable afterward.
Incorrect Answers
Answer C is incorrect because Dynamic desirable actively tries to negotiate trunking with DTP, directly conflicting with the requirement to suppress negotiation. At Ember, DTP suppression evidence is checked directly. The switchport mode choice at Ember therefore misses the required outcome. At Ember, the DTP suppression state is observable afterward.
Answer B is incorrect because Dynamic auto still relies on DTP negotiation to become a trunk and therefore is not the deterministic no-DTP configuration requested. At Ember, DTP suppression evidence is checked directly. The switchport mode choice at Ember therefore misses the required outcome. At Ember, the DTP suppression state is observable afterward.
Answer A is incorrect because Assigning an access VLAN changes access-port membership and does not disable DTP on an interface intended to remain a trunk. At Ember, DTP suppression evidence is checked directly. The switchport access choice at Ember therefore misses the required outcome. At Ember, the DTP suppression state is observable afterward.
Question 10
Harbor permits VLAN 50 on a trunk, but VLAN 50 has not been created on the local switch. What additional action is required for normal local VLAN 50 switching? Choose ONE.
- Create VLAN 50 in the local VLAN database
- Configure an IP address on every access port
- Enable PortFast on the trunk
- Make VLAN 50 the native VLAN
Correct Answer: A
Correct Answer
Answer A is correct because A trunk allowed list only permits a VLAN to cross the link; the VLAN must also exist and be active locally for normal Layer 2 switching in that VLAN. At Harbor, allowed active VLAN evidence is checked directly. The Create VLAN choice at Harbor therefore meets the required outcome. At Harbor, the allowed active VLAN state is observable afterward.
Incorrect Answers
Answer D is incorrect because Making VLAN 50 native changes how untagged frames are classified; it does not create the VLAN in the local VLAN database. At Harbor, allowed active VLAN evidence is checked directly. The Make VLAN choice at Harbor therefore misses the required outcome. At Harbor, the allowed active VLAN state is observable afterward.
Answer C is incorrect because PortFast affects spanning-tree transition behavior and is not what makes an allowed VLAN exist or become active on the switch. At Harbor, allowed active VLAN evidence is checked directly. The Enable PortFast choice at Harbor therefore misses the required outcome. At Harbor, the allowed active VLAN state is observable afterward.
Answer B is incorrect because Layer 2 access ports do not require per-port IP addresses to switch VLAN traffic, so this does not address the missing VLAN state. At Harbor, allowed active VLAN evidence is checked directly. The Configure an choice at Harbor therefore misses the required outcome. At Harbor, the allowed active VLAN state is observable afterward.
Question 11
Keystone needs a routed point-to-point uplink from a multilayer switch and does not want the link to participate in VLAN trunking. Which interface command changes the port to Layer 3 mode? Choose ONE.
- switchport trunk native vlan 1
- no switchport
- switchport mode trunk
- switchport mode access
Correct Answer: B
Correct Answer
Answer B is correct because `no switchport` converts a supported multilayer-switch interface to a routed Layer 3 port, allowing an IP address to be configured directly on it. At Keystone, routed port evidence is checked directly. The no switchport choice at Keystone therefore meets the required outcome. At Keystone, the routed port state is observable afterward.
Incorrect Answers
Answer C is incorrect because Trunk mode keeps the interface operating at Layer 2 and carries VLANs rather than turning the physical link into a routed port. At Keystone, routed port evidence is checked directly. The switchport mode choice at Keystone therefore misses the required outcome. At Keystone, the routed port state is observable afterward.
Answer D is incorrect because Access mode is also Layer 2 operation and assigns untagged traffic to one VLAN instead of enabling a Layer 3 interface address. At Keystone, routed port evidence is checked directly. The switchport mode choice at Keystone therefore misses the required outcome. At Keystone, the routed port state is observable afterward.
Answer A is incorrect because Changing the native VLAN applies only to a Layer 2 trunk and does not convert the interface to routed operation. At Keystone, routed port evidence is checked directly. The switchport trunk choice at Keystone therefore misses the required outcome. At Keystone, the routed port state is observable afterward.
Question 12
Northstar wants VLAN 20 to traverse a switch trunk. Which two independent conditions must both be true on the local switch for VLAN 20 to appear as allowed and active? Choose TWO.
- VLAN 20 is included in the trunk allowed list
- VLAN 20 exists and is active locally
- PortFast is enabled on the trunk
- Every VLAN 20 host has the same default gateway MAC
- VLAN 20 is configured as the native VLAN
Correct Answers: A, B
Correct Answers
Answer B is correct because The VLAN must exist and be active in the switch’s VLAN database; otherwise an allow-list entry alone does not create a usable local Layer 2 domain. At Northstar, trunk eligibility evidence is checked directly. The VLAN 20 choice at Northstar therefore meets the required outcome. At Northstar, the trunk eligibility state is observable afterward.
Answer A is correct because The trunk’s allowed list must permit VLAN 20; a locally active VLAN that is filtered from the trunk will not be carried across that link. At Northstar, trunk eligibility evidence is checked directly. The VLAN 20 choice at Northstar therefore meets the required outcome. At Northstar, the trunk eligibility state is observable afterward.
Incorrect Answers
Answer E is incorrect because Native-VLAN status is not required for a VLAN to traverse a trunk; non-native VLANs normally cross with 802.1Q tags. At Northstar, trunk eligibility evidence is checked directly. The VLAN 20 choice at Northstar therefore misses the required outcome. At Northstar, the trunk eligibility state is observable afterward.
Answer D is incorrect because Host gateway MAC addresses are learned dynamically and are unrelated to whether a VLAN is allowed and active on the trunk itself. At Northstar, trunk eligibility evidence is checked directly. The Every VLAN choice at Northstar therefore misses the required outcome. At Northstar, the trunk eligibility state is observable afterward.
Answer C is incorrect because PortFast controls spanning-tree convergence and is not a prerequisite for a VLAN to exist locally or be admitted by the trunk filter. At Northstar, trunk eligibility evidence is checked directly. The PortFast is choice at Northstar therefore misses the required outcome. At Northstar, the trunk eligibility state is observable afterward.
Question 13
Quartz’s router-on-a-stick design uses VLAN 99 as the native VLAN on the switch trunk. How should router subinterface Gi0/0.99 identify the native VLAN? Choose ONE.
- encapsulation dot1Q 99
- switchport trunk native vlan 99
- ip address dhcp
- encapsulation dot1Q 99 native
Correct Answer: D
Correct Answer
Answer D is correct because Adding the `native` keyword to `encapsulation dot1Q 99 native` tells the router subinterface to treat VLAN 99 as the untagged native VLAN on that 802.1Q link. At Quartz, native subinterface evidence is checked directly. The encapsulation dot1Q choice at Quartz therefore meets the required outcome. At Quartz, the native subinterface state is observable afterward.
Incorrect Answers
Answer A is incorrect because `encapsulation dot1Q 99` maps tagged VLAN 99 frames but does not declare VLAN 99 native, so it conflicts with the switch sending that VLAN untagged. At Quartz, native subinterface evidence is checked directly. The encapsulation dot1Q choice at Quartz therefore misses the required outcome. At Quartz, the native subinterface state is observable afterward.
Answer B is incorrect because `switchport trunk native vlan 99` is a switchport command; it is not the syntax used under a router Ethernet subinterface. At Quartz, native subinterface evidence is checked directly. The switchport trunk choice at Quartz therefore misses the required outcome. At Quartz, the native subinterface state is observable afterward.
Answer C is incorrect because `ip address dhcp` controls how an interface obtains an IP address and does not define 802.1Q VLAN encapsulation or native-VLAN behavior. At Quartz, native subinterface evidence is checked directly. The ip address choice at Quartz therefore misses the required outcome. At Quartz, the native subinterface state is observable afterward.
Question 14
Aster wants to verify which VLANs are configured, allowed, active, and forwarding on Gi1/0/48 after a trunk change. Which command is most direct? Choose ONE.
- show interfaces trunk
- show ip interface brief
- show vlan brief
- show spanning-tree root
Correct Answer: A
Correct Answer
Answer A is correct because `show interfaces trunk` is the trunk-focused summary that shows trunking ports, native VLANs, and the configured/active/forwarding VLAN sets relevant to the fault. At Aster, trunk verification evidence is checked directly. The show interfaces choice at Aster therefore meets the required outcome. At Aster, the trunk verification state is observable afterward.
Incorrect Answers
Answer C is incorrect because `show vlan brief` is useful for VLAN database and access-port membership but does not provide the same trunk-specific allowed/native/forwarding view. At Aster, trunk verification evidence is checked directly. The show vlan choice at Aster therefore misses the required outcome. At Aster, the trunk verification state is observable afterward.
Answer B is incorrect because `show ip interface brief` summarizes Layer 3 interface addresses and line/protocol status, not 802.1Q trunk VLAN filtering. At Aster, trunk verification evidence is checked directly. The show ip choice at Aster therefore misses the required outcome. At Aster, the trunk verification state is observable afterward.
Answer D is incorrect because `show spanning-tree root` focuses on root-bridge information and does not summarize trunk encapsulation, native VLAN, and allowed VLAN lists. At Aster, trunk verification evidence is checked directly. The show spanning-tree choice at Aster therefore misses the required outcome. At Aster, the trunk verification state is observable afterward.
Question 15
Delta must confirm whether Gi1/0/22 is administratively an access or trunk port and what access/native/voice VLANs are associated with it. Which command is most useful? Choose ONE.
- show mac address-table dynamic
- show ip route connected
- show interfaces Gi1/0/22 switchport
- show interfaces Gi1/0/22 counters errors
Correct Answer: C
Correct Answer
Answer C is correct because `show interfaces … switchport` displays administrative and operational switchport mode plus VLAN-related properties, which directly answers the requested Layer 2 verification questions. At Delta, switchport detail evidence is checked directly. The show interfaces choice at Delta therefore meets the required outcome. At Delta, the switchport detail state is observable afterward.
Incorrect Answers
Answer D is incorrect because Interface error counters are valuable for physical or frame-error troubleshooting but do not identify the switchport’s access/trunk/VLAN configuration. At Delta, switchport detail evidence is checked directly. The show interfaces choice at Delta therefore misses the required outcome. At Delta, the switchport detail state is observable afterward.
Answer A is incorrect because The MAC address table shows learned source MAC locations and VLANs, not the administrative and operational mode settings of one switchport. At Delta, switchport detail evidence is checked directly. The show mac choice at Delta therefore misses the required outcome. At Delta, the switchport detail state is observable afterward.
Answer B is incorrect because The connected route table shows Layer 3 networks associated with routed interfaces and SVIs, not detailed Layer 2 switchport state. At Delta, switchport detail evidence is checked directly. The show ip choice at Delta therefore misses the required outcome. At Delta, the switchport detail state is observable afterward.
Question 16
Juniper connects a Cisco IP phone with a PC behind it to Gi1/0/9. Which statement best describes normal frame handling when data VLAN 20 and voice VLAN 120 are configured? Choose ONE.
- Both PC and phone traffic must be sent untagged in the voice VLAN
- The PC’s ordinary traffic uses the access VLAN while the phone can tag voice traffic for the configured voice VLAN
- The port becomes an 802.1Q trunk with unrestricted VLAN access to the PC
- Voice VLAN configuration turns the switchport into a Layer 3 routed interface
Correct Answer: B
Correct Answer
Answer B is correct because Cisco access-plus-voice operation keeps ordinary endpoint data associated with the access VLAN while the IP phone can identify/tag voice traffic for the separate configured voice VLAN. At Juniper, phone data voice evidence is checked directly. The The PC’s choice at Juniper therefore meets the required outcome. At Juniper, the phone data voice state is observable afterward.
Incorrect Answers
Answer A is incorrect because Putting both traffic classes untagged into the voice VLAN defeats the separate data/voice VLAN design and is not the behavior created by access plus voice VLAN configuration. At Juniper, phone data voice evidence is checked directly. The Both PC choice at Juniper therefore misses the required outcome. At Juniper, the phone data voice state is observable afterward.
Answer C is incorrect because The presence of a voice VLAN does not make the endpoint port an unrestricted infrastructure trunk; the PC does not gain arbitrary VLAN carriage. At Juniper, phone data voice evidence is checked directly. The The port choice at Juniper therefore misses the required outcome. At Juniper, the phone data voice state is observable afterward.
Answer D is incorrect because Voice VLAN configuration remains a Layer 2 switchport feature and does not convert the interface into a routed Layer 3 port. At Juniper, phone data voice evidence is checked directly. The Voice VLAN choice at Juniper therefore misses the required outcome. At Juniper, the phone data voice state is observable afterward.
Question 17
Mesa’s hosts in VLAN 10 use SVI Vlan10 at 10.10.10.1/24 for inter-VLAN routing. What address should a host in VLAN 10 normally configure as its default gateway? Choose ONE.
- 10.10.10.1
- The physical switchport’s MAC address
- 10.20.20.1
- 10.10.10.255
Correct Answer: A
Correct Answer
Answer A is correct because The host’s default gateway should be an IP address on the local subnet that routes off-subnet traffic; the VLAN 10 SVI at 10.10.10.1 provides that Layer 3 function. At Mesa, default gateway evidence is checked directly. The 10.10.10.1 choice at Mesa therefore meets the required outcome. At Mesa, the default gateway state is observable afterward.
Incorrect Answers
Answer C is incorrect because 10.20.20.1 belongs to a different IP subnet, so a normal VLAN 10 host cannot use it as its directly reachable default gateway. At Mesa, default gateway evidence is checked directly. The 10.20.20.1 choice at Mesa therefore misses the required outcome. At Mesa, the default gateway state is observable afterward.
Answer D is incorrect because 10.10.10.255 is the directed broadcast address for the /24 and cannot be assigned as the host’s gateway interface address. At Mesa, default gateway evidence is checked directly. The 10.10.10.255 choice at Mesa therefore misses the required outcome. At Mesa, the default gateway state is observable afterward.
Answer B is incorrect because A default gateway is configured as an IP next hop, not as a switchport MAC address; ARP resolves the selected gateway IP to a MAC when needed. At Mesa, default gateway evidence is checked directly. The The physical choice at Mesa therefore misses the required outcome. At Mesa, the default gateway state is observable afterward.
Question 18
Pioneer is documenting 802.1Q behavior on a trunk where VLAN 99 is native. How are frames for non-native VLAN 20 normally distinguished on the wire? Choose ONE.
- Native VLAN 99 traffic is normally untagged; VLAN 20 traffic is normally tagged
- Only the access VLAN command determines tagging on a trunk
- All VLANs are identified only by source MAC address, not tags
- VLAN 20 and VLAN 99 are both always untagged
Correct Answer: A
Correct Answer
Answer A is correct because On a conventional 802.1Q trunk, non-native VLAN traffic carries an 802.1Q tag while native-VLAN traffic is normally transmitted untagged, allowing the receiver to classify untagged frames into the native VLAN. At Pioneer, 802.1Q tagging evidence is checked directly. The Native VLAN choice at Pioneer therefore meets the required outcome. At Pioneer, the 802.1Q tagging state is observable afterward.
Incorrect Answers
Answer D is incorrect because If multiple VLANs were all sent untagged on the same trunk there would be no VLAN identifier to distinguish them, so that does not describe normal 802.1Q trunk behavior. At Pioneer, 802.1Q tagging evidence is checked directly. The VLAN 20 choice at Pioneer therefore misses the required outcome. At Pioneer, the 802.1Q tagging state is observable afterward.
Answer C is incorrect because MAC addresses identify endpoints, not the VLAN membership of frames traversing an 802.1Q trunk; the VLAN tag provides that segmentation for non-native VLANs. At Pioneer, 802.1Q tagging evidence is checked directly. The All VLANs choice at Pioneer therefore misses the required outcome. At Pioneer, the 802.1Q tagging state is observable afterward.
Answer B is incorrect because Access-VLAN configuration applies to access-mode ports; trunk tagging behavior is governed by trunk/native-VLAN settings and 802.1Q operation. At Pioneer, 802.1Q tagging evidence is checked directly. The Only the choice at Pioneer therefore misses the required outcome. At Pioneer, the 802.1Q tagging state is observable afterward.
Question 19
Summit must carry VLANs 10, 20, and 30 on a trunk but block every other user VLAN. Which setting directly implements that filtering? Choose ONE.
- spanning-tree vlan 10 priority 4096
- switchport access vlan 10
- switchport trunk allowed vlan 10,20,30
- switchport trunk native vlan 10
Correct Answer: C
Correct Answer
Answer C is correct because The trunk allowed-VLAN list is the filtering control that limits which VLANs can be carried over the trunk, so specifying 10,20,30 enforces the stated scope. At Summit, trunk filtering evidence is checked directly. The switchport trunk choice at Summit therefore meets the required outcome. At Summit, the trunk filtering state is observable afterward.
Incorrect Answers
Answer D is incorrect because The native-VLAN command determines treatment of untagged frames; it does not restrict the trunk to only the listed user VLANs. At Summit, trunk filtering evidence is checked directly. The switchport trunk choice at Summit therefore misses the required outcome. At Summit, the trunk filtering state is observable afterward.
Answer B is incorrect because An access-VLAN command applies to an access port and does not define the set of VLANs carried by a trunk. At Summit, trunk filtering evidence is checked directly. The switchport access choice at Summit therefore misses the required outcome. At Summit, the trunk filtering state is observable afterward.
Answer A is incorrect because Spanning-tree priority affects root-bridge election for a VLAN but does not configure trunk VLAN admission. At Summit, trunk filtering evidence is checked directly. The spanning-tree vlan choice at Summit therefore misses the required outcome. At Summit, the trunk filtering state is observable afterward.
Question 20
Beacon is enabling inter-VLAN routing with router-on-a-stick. Which two switch/router conditions are essential for VLAN 10 and VLAN 20 traffic to reach the appropriate router subinterfaces? Choose TWO.
- The switch link uses PortFast trunk mode
- Each router subinterface has matching `encapsulation dot1Q <vlan-id>`
- The router physical interface must be configured as a switchport
- The switch link to the router operates as an 802.1Q trunk carrying the VLANs
- Each VLAN must use the same IP subnet
Correct Answers: B, D
Correct Answers
Answer D is correct because The switch-to-router link must carry the relevant VLANs as an 802.1Q trunk so frames from multiple Layer 2 domains reach the single physical router interface. At Beacon, router-on-a-stick evidence is checked directly. The The switch choice at Beacon therefore meets the required outcome. At Beacon, the router-on-a-stick state is observable afterward.
Answer B is correct because Each router subinterface needs the matching 802.1Q VLAN identifier so the router can terminate the correct tagged frames and route between the associated IP networks. At Beacon, router-on-a-stick evidence is checked directly. The Each router choice at Beacon therefore meets the required outcome. At Beacon, the router-on-a-stick state is observable afterward.
Incorrect Answers
Answer A is incorrect because PortFast may be considered in specific edge designs but it is not a fundamental requirement that binds VLAN tags to router subinterfaces for router-on-a-stick. At Beacon, router-on-a-stick evidence is checked directly. The The switch choice at Beacon therefore misses the required outcome. At Beacon, the router-on-a-stick state is observable afterward.
Answer E is incorrect because Different VLANs normally correspond to different IP subnets for inter-VLAN routing; putting both VLANs in the same subnet would undermine the routed boundary. At Beacon, router-on-a-stick evidence is checked directly. The Each VLAN choice at Beacon therefore misses the required outcome. At Beacon, the router-on-a-stick state is observable afterward.
Answer C is incorrect because A router Ethernet interface used for subinterfaces is not configured as a Layer 2 switchport; 802.1Q encapsulation is defined on the router subinterfaces. At Beacon, router-on-a-stick evidence is checked directly. The The router choice at Beacon therefore misses the required outcome. At Beacon, the router-on-a-stick state is observable afterward.
