Question 1
A network administrator needs to create an ACL that denies FTP traffic from a specific source subnet (192.168.10.0/24) to a specific destination server (10.0.0.5). Which type of ACL is required for this task?
Correct Answer:
Extended Numbered ACL
Question 2
A network administrator needs to use a standard ACL to prevent traffic from the 192.168.1.0/24 subnet from reaching the server subnet 10.10.10.0/24. All other traffic from 192.168.1.0/24 should be permitted to reach other destinations. According to Cisco best practices, where should this ACL be placed?
Correct Answer:
Outbound on the destination router's interface connected to 10.10.10.0/24.
Question 3
An administrator writes the following Access Control Entry (ACE): `access-list 10 permit 192.168.16.0 0.0.15.255`. Which range of IP addresses will be permitted by this statement?
Correct Answer:
192.168.16.0 to 192.168.31.255
Question 4
A network administrator applies the following ACL to the inbound direction of an interface: `access-list 101 permit tcp 10.1.1.0 0.0.0.255 any eq 80` `access-list 101 permit tcp 10.1.1.0 0.0.0.255 any eq 443` A user on the 10.1.1.50 host reports that they can access websites but cannot resolve domain names using the company's DNS server at 10.10.10.10. What is the most likely cause of this issue?
Correct Answer:
The DNS traffic is being blocked by the implicit deny at the end of the ACL.
Question 5
A network administrator wants to restrict Telnet and SSH access to a router's virtual terminal (VTY) lines, allowing access only from the management workstation with the IP address 10.0.0.99. Which set of commands correctly accomplishes this?
Correct Answer:
router(config)# access-list 1 permit host 10.0.0.99 router(config)# line vty 0 15 router(config-line)# access-class 1 in
Question 1
Exam overview

About this Exam

Prepare with the Cisco CCNA 200-301 Exam practice quiz. This question bank includes 89 questions covering network, address, cisco, administrator, and switch. Use it to review important concepts, identify knowledge gaps, and build confidence for the related exam, course, or assessment.

More details

Additional Information

Cisco CCNA 200-301 Exam

This practice set contains 89 questions from the matching question bank and focuses on network, address, cisco, administrator, and switch. Work through each question carefully, review the provided solutions, and revisit topics that need more study before your next attempt.

This is an independent study resource intended for practice and review; it is not an official examination or an endorsement by any organization named in the title.

Quiz information

Frequently Asked Questions

The complete question count is available after full access is unlocked.
No fixed duration is currently configured for this quiz.
Question explanations are included where they are available in the quiz content, helping you review the reasoning after answering.
Yes. You can retake the practice test again as you continue studying during your available access period.
After your access is confirmed, you can continue into the complete practice exam from this quiz flow.
Unless explicitly stated otherwise, this page provides independent practice material for study and exam preparation and is not the official examination itself.
Keep studying

Related Questions