FirstTry

Objective 2.1

200-301

Configure and verify VLANs (normal range) spanning multiple switches.

Objective 2.1 sits in Network Access, which carries 20% of the CCNA exam. The questions below are original, written from the official objective title above, and each explanation cites the Cisco page it rests on.

Objective title verbatim from the official objectives. Cisco exam page ↗

A worked example

Shown solved, with the whole explanation open: this is what every question here carries.

2-1Network Access

A user on Gi1/0/8 lost connectivity after a maintenance window. The switch reports the following.

SW1# show interfaces gigabitethernet1/0/8 switchportName: Gi1/0/8Switchport: EnabledAdministrative Mode: static accessOperational Mode: static accessAccess Mode VLAN: 30 (Inactive)Trunking Native Mode VLAN: 1 (default) SW1# show vlan brief VLAN Name                             Status    Ports---- -------------------------------- --------- -------------------------------1    default                          active    Gi1/0/1, Gi1/0/210   ENG                              active    Gi1/0/3, Gi1/0/420   VOICE                            active    Gi1/0/5

What explains the port state?

The access VLAN was moved into the reserved 1002 to 1005 rangeIDs 1002 through 1005 are reserved for Token Ring and FDDI. That would be right had the configured ID fallen in that band, but 30 is normal range.
VLAN 30 was deleted and the port kept its assignmentCorrect · your answerCorrect. The database no longer holds that ID, so the retained membership is unusable.
The interface was administratively shut during the windowAn administratively shut interface reads Switchport: Enabled but shows a down line protocol in show interfaces status, and the access VLAN would not be qualified this way.
VLAN 30 is suspended by VTP pruning on the uplink trunkPruning limits which VLANs a trunk floods. It has no bearing on the membership an access port carries, which is what the qualifier here describes.

Correct.

Checked against cisco.com, August 2026

Concept

An access port's VLAN membership is a static assignment stored on the interface, not a pointer that follows the VLAN database. If the database no longer holds that ID, the membership survives in the running configuration while the port stops passing traffic.

Why B

The brief listing shows 1, 10 and 20 only, so the ID the interface names is gone from the database. That is exactly the state the switch flags with Inactive next to the access VLAN, and the port stays that way until it is given an ID that exists.

Source

Caution When you delete a VLAN, any ports assigned to that VLAN become inactive. They remain associated with the VLAN (and thus inactive) until you assign them to a new VLAN.

Cisco: Configuring VLANs (Catalyst 9300, IOS XE 17.3.x), checked August 2026
#vlan#access-port#show-vlan

Now you: objective 2.1 questions

No account needed. The explanation opens when you answer.

Sample question 1 of 3

2-1Network Access

An engineer configures an access port on a switch whose database holds only VLANs 1, 10 and 20.

SW2(config)# interface gigabitethernet1/0/12SW2(config-if)# switchport mode accessSW2(config-if)# switchport access vlan 45SW2(config-if)# endSW2#

What happens to VLAN 45?

Sample question 2 of 3

2-1Network Access

A switch has used every spanning-tree instance it supports. A new VLAN is added in the VTP domain and its uplinks look like this.

SW3# show interfaces gigabitethernet1/0/24 trunk Port        Mode      Encapsulation  Status        Native vlanGi1/0/24    on        802.1q         trunking      1 Port        Vlans allowed on trunkGi1/0/24    1-4094

Which action limits the loop exposure?

Sample question 3 of 3

2-1Network Access

Two workstations sit on the same switch, one in VLAN 20 and one in VLAN 30, each with an address from its own subnet. They cannot reach each other. What is required?

That’s 3 of the full CCNA bank.

Keep going free: 10 questions per certification in bank practice, with no account.

Continue practicing

Read the sources

These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.

More objectives in Network Access