An application fails to connect from a remote site to a server in the data center. The network team confirms that the TCP handshake reaches the server, but the application times out. Which NAT-related cause is most likely?

The remote site's router has a routing loop for the server's IP address.

The application is using UDP, and the NAT device does not support UDP translations.

The NAT policy is missing an entry for the application's destination port.

The server's firewall is blocking the application's source IP address.

An application that normally connects directly to a cloud service starts failing after a new proxy configuration is applied. The application does not support proxy settings. Which issue is most likely?

The application's DNS resolution is now handled by the proxy, causing delays.

The proxy is using a different protocol than the application requires.

The proxy is caching the application's data and serving stale responses.

The application is ignoring the proxy and connecting directly, but the network firewall now blocks direct outbound connections.

A remote user connects via VPN and can access internal web servers, but cannot access an internal email server on TCP 993 (IMAPS). The VPN tunnel is up. What is the most likely cause?

The firewall is blocking TCP 993 from the VPN address pool

The user's proxy is blocking the email traffic

A client application cannot connect to a server on TCP port 8443. The administrator tests connectivity using Telnet to port 8443 from the client and receives 'Connection refused'. Which conclusion is most accurate?

The server is not listening on TCP port 8443.

The client's local firewall is blocking outbound connections.

The network path is blocked by a router ACL.

A firewall is silently dropping packets to port 8443.

A company has a site-to-site VPN between two offices. Users in Office A can reach servers in Office B by IP, but an application on TCP 3389 (RDP) times out. The VPN tunnel is up. What is the most likely cause?

The VPN tunnel is using the wrong encryption

The NAT in Office A is not translating the RDP traffic

The proxy in Office A is intercepting the RDP traffic

The firewall in Office B is blocking TCP 3389 from Office A's subnet

CiscoCertified Network Associate Automation (CCNA Automation)

Domain 6Objective 8

8. Identify Cause of Application Connectivity Issues (NAT Problem, Transport Port Blocked, Proxy, and VPN) 200-901 Practice Questions (Page 1)

Part of the 6.0 Network Fundamentals domain, which accounts for 15% of the 200-901 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–1 from this objective — we provide 11 practice questions to prepare you well beyond it. (estimate)

11questions here

3free pages

4concepts

15%of the exam

Questions 1–5

1foundation · easy
An application fails to connect from a remote site to a server in the data center. The network team confirms that the TCP handshake reaches the server, but the application times out. Which NAT-related cause is most likely?
Select an answer first
2foundation · easy
An application that normally connects directly to a cloud service starts failing after a new proxy configuration is applied. The application does not support proxy settings. Which issue is most likely?
Select an answer first
3application · medium
A remote user connects via VPN and can access internal web servers, but cannot access an internal email server on TCP 993 (IMAPS). The VPN tunnel is up. What is the most likely cause?
Select an answer first
4foundation · easy
A client application cannot connect to a server on TCP port 8443. The administrator tests connectivity using Telnet to port 8443 from the client and receives 'Connection refused'. Which conclusion is most accurate?
Select an answer first
5expert · hard
A company has a site-to-site VPN between two offices. Users in Office A can reach servers in Office B by IP, but an application on TCP 3389 (RDP) times out. The VPN tunnel is up. What is the most likely cause?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 200-901

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “200-901” is a trademark of its owner, used for identification only.