A company runs a web server that must be reachable from the internet. The security team wants to block known malicious IPs, inspect HTTP traffic for application-layer attacks, and also stop an ongoing brute-force SSH attack. Which single network component should be placed in front of the server?

Next-generation firewall (NGFW)

Layer 3 switch with access control lists (ACLs)

Intrusion prevention system (IPS) only

A network administrator is troubleshooting connectivity between two PCs connected to the same Layer 2 switch. The PCs are in the same VLAN and IP subnet. The switch's MAC address table is empty. What will happen when PC1 sends a frame to PC2?

The switch will drop the frame because the destination MAC is unknown.

The switch will route the frame to the default gateway.

The switch will flood the frame out all ports in the VLAN except the receiving port.

The switch will send the frame to the router for forwarding.

What is the primary role of a server in a network?

To forward packets between different networks

To provide resources, services, or data to clients

To connect wireless clients to a wired network

A hotel has 50 access points and 10 switches. The IT team is small and wants to simplify management. They are considering a controller-based architecture. What is the primary trade-off they should consider?

Controllers increase configuration complexity for each device.

Centralized management reduces per-device configuration but introduces a single point of failure.

Controllers require a separate power source for each access point.

Controllers eliminate the need for any switches.

How does an IPS differ from an IDS in terms of traffic handling?

An IPS is deployed at the edge, while an IDS is deployed in the core

An IPS uses signatures, while an IDS uses behavioral analysis

An IPS only monitors traffic, while an IDS blocks traffic

An IPS is inline and can block traffic, while an IDS is passive and only alerts

CiscoCertified Network Associate (CCNA)

Domain 1Objective 1

1.1 Explain the Role and Function of Network Components 200-301 Practice Questions (Page 5)

Part of the Network Fundamentals domain, which accounts for 20% of the 200-301 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–1 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)

45questions here

9free pages

10concepts

20%of the exam

Questions 21–25

21application · medium
A company runs a web server that must be reachable from the internet. The security team wants to block known malicious IPs, inspect HTTP traffic for application-layer attacks, and also stop an ongoing brute-force SSH attack. Which single network component should be placed in front of the server?
Select an answer first
22application · medium
A network administrator is troubleshooting connectivity between two PCs connected to the same Layer 2 switch. The PCs are in the same VLAN and IP subnet. The switch's MAC address table is empty. What will happen when PC1 sends a frame to PC2?
Select an answer first
23foundation · easy
What is the primary role of a server in a network?
Select an answer first
24expert · hard
A hotel has 50 access points and 10 switches. The IT team is small and wants to simplify management. They are considering a controller-based architecture. What is the primary trade-off they should consider?
Select an answer first
25foundation · easy
How does an IPS differ from an IDS in terms of traffic handling?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 200-301

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “200-301” is a trademark of its owner, used for identification only.