Cisco CCNA 200-301 Network Fundamentals Practice Questions

Free CCNA 200-301 Network Fundamentals practice test questions

8 questions from this domain with answers and explanations - different from the samples on the main Cisco CCNA 200-301 page. Sign up free to practice the full set.

1. Question 1Network Fundamentals

   A host sends a TCP SYN segment to a server. The server responds with a TCP SYN-ACK. What does the host send next to complete the connection establishment?

   • ASYN
   • BRST
   • CACKCorrect
   • DFIN
   ✓ Correct answer: C

   TCP uses a three-way handshake to establish a connection: the initiating host sends SYN, the server replies with SYN-ACK (acknowledging the client's SYN and sending its own), and finally the client sends ACK to acknowledge the server's SYN. Only after this third message does the connection move to the ESTABLISHED state and data transfer can begin.

   Why the other options are wrong

   • ASYN is the first message sent by the initiating host, not the third - sending another SYN after receiving SYN-ACK would restart the handshake rather than complete it.
   • BRST is a reset flag used to abruptly terminate or reject a connection, not to complete a normal three-way handshake.
   • DFIN is used to initiate graceful connection teardown after data transfer is complete, not to establish the connection.
2. Question 2Network Fundamentals

   Which statement correctly describes a collision domain?

   • ADevices that all receive the same broadcast frames
   • BDevices that share a single VLAN identifier
   • CDevices whose frames can collide on shared mediaCorrect
   • DDevices connected to one routed IP subnet
   ✓ Correct answer: C

   A collision domain covers devices that share a medium where two simultaneous transmissions would collide, such as a legacy hub segment. A broadcast domain, by contrast, is the set of devices that receive one another's broadcast frames, typically bounded by a VLAN or router. Modern switches place each port in its own collision domain.

   Why the other options are wrong

   • AReceiving the same broadcast frames defines a broadcast domain, not a collision domain.
   • BSharing a VLAN ID describes a broadcast domain boundary, not a collision domain.
   • DA routed IP subnet aligns with a broadcast domain, not a collision domain.
3. Question 3Network Fundamentals

   Greenfield Technologies is evaluating WAN connectivity options. Which WAN technology provides a point-to-point dedicated connection with guaranteed bandwidth between two sites?

   • ADSL
   • BSatellite
   • CLeased lineCorrect
   • DCable broadband
   ✓ Correct answer: C

   A leased line is a private, always-on circuit provisioned by a service provider exclusively for one customer between two fixed locations. Because the bandwidth is not shared, the connection delivers consistent, guaranteed throughput with predictable latency - making leased lines ideal for mission-critical WAN links despite their higher cost compared to shared broadband services.

   Why the other options are wrong

   • ADSL (Digital Subscriber Line) uses existing telephone infrastructure and shares bandwidth in the access network, providing best-effort rather than guaranteed bandwidth without a true dedicated point-to-point circuit.
   • BSatellite connectivity introduces significant latency (500-700 ms) due to the distance signals must travel and does not offer a dedicated point-to-point circuit with guaranteed bandwidth.
   • DCable broadband uses a shared coaxial plant in the neighborhood, meaning bandwidth is shared with other subscribers and is not a dedicated point-to-point connection.
4. Question 4Network FundamentalsSelect all that apply

   Which two are characteristics of UDP compared to TCP? (Choose two.)

   • AUDP guarantees delivery of every packet
   • BUDP provides connectionless communicationCorrect
   • CUDP has lower overhead than TCPCorrect
   • DUDP uses a three-way handshake
   ✓ Correct answer: B, C

   UDP is connectionless, establishing no connection before sending data. UDP has lower overhead because it doesn't include reliability mechanisms like sequence numbers and acknowledgments. These characteristics make UDP suitable for speed-sensitive applications.

   Why the other options are wrong

   • AUDP has no acknowledgements or retransmission, so nothing about delivery is guaranteed.
   • DUses three-way handshake is incorrect because UDP doesn't establish connections.
5. Question 5Network Fundamentals

   A network administrator is configuring an IPv6 address on a router interface. She enters the address 2001:0db8:0000:0000:0000:0000:0000:0001/64. Which of the following is the correct compressed (shortened) form of this address?

   • A2001:db8:0::0:1/64
   • B2001:db8::1/64Correct
   • C2001:db8:::1/64
   • D2001:db8:0:0:0:0:0:1/64
   ✓ Correct answer: B

   To compress an IPv6 address, drop leading zeros in each hextet and replace the longest run of consecutive all-zero hextets with a single double colon (::). 2001:0db8:0000:0000:0000:0000:0000:0001 becomes 2001:db8::1, collapsing the six zero groups with one ::. The :: may be used only once.

   Why the other options are wrong

   • ALeaving a zero in 2001:db8:0::0:1/64 is not fully compressed, because the remaining zero hextets should also collapse into the single :: rather than be written out.
   • CUsing three colons in 2001:db8:::1/64 is invalid, since :: already stands for the zero groups and a third colon is not allowed.
   • DWriting every group out as 2001:db8:0:0:0:0:0:1/64 is the fully expanded form, not the compressed form the question asks for.
6. Question 6Network Fundamentals

   Which statement correctly describes the function of the default gateway on an IPv4 host?

   • AIt is the router interface address the host uses to reach destinations outside its local subnetCorrect
   • BIt is the DNS server address used to resolve hostnames to IP addresses
   • CIt is the broadcast address used to reach all hosts on the local subnet at once
   • DIt is the loopback address the host uses to test its own TCP/IP stack
   ✓ Correct answer: A

   When a host needs to send traffic to a destination outside its own subnet, it forwards the packet to its default gateway, which is typically the IP address of a router interface on the local segment. The router then routes the packet toward the remote network.

   Why the other options are wrong

   • BA DNS server resolves names to addresses; it is a separate configuration item from the default gateway.
   • CThe subnet broadcast address reaches local hosts only and cannot forward anything off-subnet.
   • DThe loopback address (127.0.0.1) tests the local stack and is unrelated to off-subnet forwarding.
7. Question 7Network Fundamentals

   A company is assigned the public address block 203.0.113.0/24 and must divide it into 8 equal subnets. What is the prefix length and number of usable hosts per subnet?

   • A/27 with 30 usable hosts per subnetCorrect
   • B/28 with 14 usable hosts per subnet
   • C/26 with 62 usable hosts per subnet
   • D/29 with 6 usable hosts per subnet
   ✓ Correct answer: A

   To create 8 subnets you borrow 3 host bits (2^3 = 8). Extending /24 by 3 bits gives /27 (255.255.255.224). Each /27 has 32 addresses with 30 usable hosts (32 minus network and broadcast).

   Why the other options are wrong

   • BA /28 would create 16 subnets, double the requirement.
   • CA /26 would create only 4 subnets, half of what is needed.
   • DA /29 would create 32 subnets, far more than 8.
8. Question 8Network Fundamentals

   How many /64 subnets can be created from a single IPv6 /48 prefix assigned to an enterprise site?

   • A65,536Correct
   • B256
   • C1,024
   • D16
   ✓ Correct answer: A

   The difference between /64 and /48 is 16 bits (64 minus 48). Because each subnet bit doubles the number of subnets, 2^16 equals 65,536 possible /64 subnets, which is why a /48 is a common site allocation in IPv6.

   Why the other options are wrong

   • B256 would be the result of only 8 subnet bits (a /56 to /64 difference).
   • C1,024 corresponds to 10 subnet bits, which does not match the 16-bit difference.
   • D16 corresponds to only 4 subnet bits, far fewer than the 16 bits available.

How Network Fundamentals is tested

This domain holds 148 of the 705 questions in the CCNA 200-301 bank, about 21%. The mix is 125 single-answer multiple choice and 23 multiple-response, so it is worth practising the formats as well as the content.

Once you have a few attempts recorded, CertGrid scores every domain separately and points you at the weakest one, so you can drill Network Fundamentals on its own rather than re-running full-length mocks.

Other CCNA 200-301 exam domains

• Network Access137 questions
• IP Connectivity175 questions
• IP Services70 questions
• Security Fundamentals105 questions
• Automation and Programmability70 questions
• All CCNA 200-301 practice questions705 total
• Network Fundamentals study notesKey concepts
• Cisco practice examsAll Cisco

CCNA 200-301 Network Fundamentals FAQ