What this area of the blueprint covers
Six v1.1 topics sit here, all under Cisco’s Network Fundamentals domain: device roles (1.1), topology architectures (1.2), physical interface and cabling types (1.3), interface and cable faults (1.4), TCP against UDP (1.5) and virtualization (1.12). The verbs are explain, describe and compare, with one exception: 1.4 asks you to identify a fault from its symptoms, and that is where interface counters come in.
The v2.0 topic list keeps only part of this ground: cable and interface diagnosis, now with distance, signal levels and pin-outs (v2.0 1.1), and hypervisors, VMs and containers (1.2). TCP against UDP, the topology architectures and VRFs drop out as assumed background (what changes in v2.0).
Device roles
The list in 1.1 runs from routers and Layer 2 and Layer 3 switches through next-generation firewalls and intrusion prevention systems (IPS), access points, wireless LAN controllers, endpoints and servers. Learn each one by the field it reads and the decision it makes: a Layer 2 switch reads the destination MAC address and picks a port, a firewall reads the session and applies a policy, a controller manages the access points that carry the radio work.
Power over Ethernet (PoE) sits in the same item because it changes what an access switch is for. A switch that powers phones, access points and cameras through the data cable has a power budget to plan as well as a port count. In the v2.0 topic list PoE moves into edge-port settings (2.2).
The layer vocabulary the exam uses
Media at a glance
| Medium | Reach to plan for | Signal source | Where you meet it |
|---|---|---|---|
| Twisted-pair copper (UTP) | 100 m per run | Electrical; can carry PoE | Access ports, phones, APs |
| Multimode fiber (MMF) | Building scale; set by the optic | Lower-cost optics | Risers, data-center rows |
| Single-mode fiber (SMF) | Kilometers; set by the optic | Laser optics | Between buildings and sites |
| Wireless (802.11) | A cell, not a cable run | Radio, shared by every client | Users and IoT at the edge |
Copper reach follows IEEE 802.3. Fiber reach depends on the optic at each end, which is why the topic list asks you to compare the media instead of memorizing distances.
Topology architectures and the route onward
Topic 1.2 names the designs. A two-tier campus, also called collapsed core, merges distribution and core into one pair of switches above the access layer; a three-tier campus keeps access, distribution and core separate once the site is large enough to need it. Spine-leaf is the data-center shape: every leaf switch links to every spine, leaves never link to each other, so any two servers on different leaves are separated by an equal hop count: leaf, spine, leaf. A wide area network (WAN) joins sites over a provider’s service, a small office/home office (SOHO) device folds routing, switching and wireless into one box, and the on-premises against cloud comparison closes the item.
Star and mesh are drawing shapes rather than designs. You still need to recognize them from a sketch, but the list in topic 1.2 is made of the named architectures above.
TCP, UDP and virtualization
Topic 1.5 is a straight comparison, and it has its own page with the ports and the handshake: TCP vs UDP. Here it is enough to place it on the map: both are Layer 4, both use port numbers, and the habit worth building is to pair each application with its transport.
Topic 1.12 covers servers, containers and virtual routing and forwarding (VRF). A VRF gives one router several separate routing tables, so two customers can both use 10.0.0.0/8 without colliding; it is the network’s version of the isolation a hypervisor gives virtual machines.
From here the route runs into addressing: IPv4 addressing and subnetting is the next study area on this site. For a filtered run of this one, open the practice test on components and cabling.
Frames: Components & cabling
Device roles, media, topology designs and the transport layer, in one set. The note under each option names the landmark a wrong pick missed.
Practice frames written by our editors for study, not Cisco items. The 200-301 exam itself mixes multiple choice, drag-and-drop and lab-style items.
Frame 001 of 018 · 0 answered · 0 ok
Keys
1–5 or A–E pick an option (on choose-N frames they toggle; then Check answer) · ← → previous / next frame · ↑ ↓ move in the frame list
- Frame 001 of 018
What is the maximum effective distance for CAT6 cabling when transmitting at 10 Gbps?
Pick an option. The verdict shows here; open the note under any option to see why.
Note on A
No twisted-pair Ethernet standard rates CAT6 for 150 meters; 100 meters is the usual maximum channel length.
Note on B
100 meters is the usual copper limit, but at 10 Gb/s it requires CAT6A, not CAT6.
Note on C
Correct: 10GBASE-T over CAT6 is limited to about 55 meters, and less where alien crosstalk is high.
Note on D
CAT6 carries 10GBASE-T well beyond 25 meters; its limit is about 55 meters, or 37 in poor crosstalk conditions.
Best answer: C · why
10GBASE-T (IEEE 802.3an) supports 100 m channels on CAT6A. Over CAT6, alien crosstalk limits the run to about 55 m, and to 37 m in poor conditions. At 1 Gb/s and below, CAT5e and CAT6 both reach 100 m. For longer distances, use fiber.
- Frame 002 of 018
In a traditional 3-tier network architecture, how many layers are there?
Pick an option. The verdict shows here; open the note under any option to see why.
Note on A
One layer describes a flat network, not the three-tier model.
Note on B
The model has no fourth tier; its layers are access, distribution and core.
Note on C
Correct: the three-tier campus model has access, distribution and core layers.
Note on D
Two layers is the collapsed-core design, where distribution and core are merged.
Best answer: C · why
The traditional three-tier campus architecture has an access layer, where end devices connect; a distribution layer, which aggregates access switches and holds policy and Layer 3 boundaries; and a core layer, a fast backbone between distribution blocks. A two-tier (collapsed core) design merges core and distribution for smaller campuses. Data centers often use spine-leaf instead.
- Frame 003 of 018
Which of the following is NOT a characteristic of a spine-leaf network topology?
Pick an option. The verdict shows here; open the note under any option to see why.
Note on A
Scalability is a defining trait of spine-leaf: add leaves for more ports and spines for more bandwidth.
Note on B
Spine-leaf is built for predictable, low latency, since any two leaves are always the same number of hops apart.
Note on C
Every leaf connecting to every spine is the defining wiring rule of spine-leaf.
Note on D
Correct: one shared backbone cable with taps is a bus topology, which is the trait spine-leaf does not have.
Best answer: D · why
In a spine-leaf (Clos) design, every leaf switch connects to every spine switch, and leaves never connect to each other. Any server-to-server path is leaf, spine, leaf, so latency is predictable, and bandwidth grows by adding spines. A shared backbone cable with taps describes a bus topology, from early coaxial Ethernet.
- Frame 004 of 018
What is the primary function of a network interface card (NIC) in a desktop computer?
Pick an option. The verdict shows here; open the note under any option to see why.
Note on A
Data storage is the job of disks and SSDs, not the network adapter.
Note on B
Power regulation is handled by the power supply and motherboard circuitry.
Note on C
General CPU input and output runs through the chipset and buses; a NIC handles only network traffic.
Note on D
Correct: the NIC provides the physical and data-link connection, with its own MAC address, to a wired or wireless network.
Best answer: D · why
A network interface card (NIC) connects a computer to a network, through an Ethernet port or a Wi-Fi radio. It works at Layers 1 and 2: it sends and receives the signals, and it holds the burned-in MAC address used in Ethernet and Wi-Fi frames. Storage, power and general I/O belong to other components.
- Frame 005 of 018
What physical property of single-mode fiber distinguishes it from multimode fiber for long-distance transmissions?
Pick an option. The verdict shows here; open the note under any option to see why.
Note on A
Correct: single-mode fiber’s narrow core, about 9 µm, carries one light mode, so there is no modal dispersion and the signal goes much farther.
Note on B
Flexibility is not what separates the two; bend tolerance depends on fiber design, not on single-mode versus multimode.
Note on C
Single-mode fiber has lower attenuation, which is one reason it suits long runs.
Note on D
The larger core belongs to multimode fiber (50 or 62.5 µm), which is why it carries several modes and reaches less far.
Best answer: A · why
Single-mode fiber has a core of about 9 µm, so light travels in one mode and does not spread out through modal dispersion; with laser optics it reaches kilometers. Multimode fiber has a 50 or 62.5 µm core that carries many modes. They arrive at slightly different times, which limits distance to hundreds of meters, but the optics are cheaper.
- Frame 006 of 018
What fundamental concept distinguishes a point-to-point copper connection from a shared media connection in network design?
Pick an option. The verdict shows here; open the note under any option to see why.
Note on A
Shared media splits the bandwidth among all stations, so it does not offer higher speeds.
Note on B
Shared media still needs cabling or radio; it simply puts many stations on one medium.
Note on C
Point-to-point links can be copper, fiber or wireless, and the link in this question is copper.
Note on D
Correct: a point-to-point link connects only two devices, which get the bandwidth to themselves and, in full duplex, see no collisions.
Best answer: D · why
A point-to-point link connects exactly two devices, as each switch port does with its host. The two ends share the medium with no one else, and in full duplex there are no collisions at all, so each switch port is its own collision domain. Shared media, such as a hub or a coaxial bus, puts many stations in one collision domain, where they split the bandwidth and use CSMA/CD.
- Frame 007 of 018
At which layer of the OSI model does the IP protocol operate?
Pick an option. The verdict shows here; open the note under any option to see why.
Note on A
The data link layer handles frames and MAC addresses, such as Ethernet, below IP.
Note on B
Correct: IP is the Layer 3 (Network layer) protocol that provides logical addressing and routing between networks.
Note on C
The transport layer above IP is where TCP and UDP work, with ports and sessions.
Note on D
The physical layer covers signals, cables and connectors, not packet addressing.
Best answer: B · why
IP operates at Layer 3, the Network layer of the OSI model. It assigns logical addresses and lets routers forward packets between networks. Below it, the data link layer (Ethernet, 802.11) moves frames between neighbors using MAC addresses, and the physical layer carries the bits. Above it, the transport layer (TCP, UDP) delivers data between applications using ports.
- Frame 008 of 018
Which statement correctly explains a characteristic of a fiber-optic point-to-point network?
Pick an option. The verdict shows here; open the note under any option to see why.
Note on A
Hubs share bandwidth on copper Ethernet, and a point-to-point fiber link has no hub in it.
Note on B
CSMA/CA is the Wi-Fi access method; wired point-to-point links need no collision avoidance.
Note on C
Correct: a point-to-point fiber link joins exactly two devices, giving them a dedicated path with no other stations on it.
Note on D
Fiber links normally run full duplex, with a pair of strands or two wavelengths, so they are not simplex-only.
Best answer: C · why
Point-to-point means one link between exactly two endpoints, such as two switches joined by a pair of fiber strands. The path is dedicated: no other station shares it, so no hub or access method is needed, and modern fiber Ethernet runs full duplex with one strand or wavelength per direction. CSMA/CA belongs to wireless LANs, and CSMA/CD to half-duplex shared Ethernet.
- Frame 009 of 018
What is the primary function of a Layer 3 switch in a network?
Pick an option. The verdict shows here; open the note under any option to see why.
Note on A
A Layer 3 switch is a wired device; wireless clients connect through access points.
Note on B
Converting media types, such as copper to fiber, is the job of a media converter or transceiver.
Note on C
Correct: a Layer 3 switch forwards frames within VLANs and also routes between them, using SVIs or routed ports.
Note on D
Filtering by application protocol is next-generation firewall work, beyond a Layer 3 switch’s normal role.
Best answer: C · why
A Layer 3 (multilayer) switch combines a switch and a router. It forwards frames inside each VLAN by MAC address and routes packets between VLANs or subnets, usually through switched virtual interfaces (SVIs) or routed ports, in hardware. It is the common way to do inter-VLAN routing in a campus distribution layer. Application-aware filtering belongs to firewalls.
- Frame 010 of 018
What is the key difference between containers and traditional virtual machines?
Pick an option. The verdict shows here; open the note under any option to see why.
Note on A
The reverse is usually true. Each VM has its own kernel behind a hypervisor, which isolates workloads more strongly than containers do.
Note on B
Correct. A container is an isolated process group on the host’s kernel, while every VM boots a complete guest OS on a hypervisor.
Note on C
Windows containers also exist. Containers must match the host kernel type, but they are not limited to Linux applications.
Note on D
Containers run on ordinary servers and laptops. Neither containers nor VMs need special hardware, although VMs benefit from CPU virtualization support.
Best answer: B · why
A virtual machine runs a full guest operating system, kernel included, on virtual hardware provided by a hypervisor. A container packages an application and its libraries but shares the kernel of the host OS, with namespaces and cgroups keeping it isolated. That makes containers smaller and faster to start than VMs, while VMs give stronger isolation and can run a different OS from the host.
- Frame 011 of 018
A network administrator needs to configure a specific interface on a switch to operate in full-duplex mode. Which command should they use to set the duplex mode to full?
Pick an option. The verdict shows here; open the note under any option to see why.
Note on A
no shutdown enables an interface; it does not set duplex.
Note on B
Correct: duplex full in interface configuration mode forces the port to full duplex; set the same on the other end, or keep both on auto.
Note on C
interface gig0/1 only enters interface configuration mode, the step before the duplex command.
Note on D
speed 100 sets the speed and leaves duplex as it is.
Best answer: B · why
Duplex is set per interface: interface GigabitEthernet0/1, then duplex full (or half, or auto). If one side is hard-set and the other autonegotiates, the auto side can fall back to half duplex, which gives a duplex mismatch with late collisions and CRC errors. Best practice is to leave both ends on auto or to hard-set both to the same values.
- Frame 012 of 018
Which type of network topology allows for each device to be directly connected to every other device in the network?
Pick an option. The verdict shows here; open the note under any option to see why.
Note on A
In a ring, each device connects only to its two neighbors.
Note on B
A bus puts every device on one shared cable instead of giving them direct links.
Note on C
Correct: a full mesh links every device directly to every other device, which gives the most redundancy at the highest cost.
Note on D
A star connects every device to a central switch, not to each other.
Best answer: C · why
A full mesh connects every node directly to every other node, so n devices need n(n-1)/2 links. It gives the most redundancy and is used for core and WAN links, but the cost grows quickly. A partial mesh connects only some pairs. Star (central switch), bus (shared cable) and ring (neighbor to neighbor) do not give every pair a direct link.
- Frame 013 of 018
Which network component primarily operates at the Network layer of the OSI model and makes forwarding decisions based on IP addresses?
Pick an option. The verdict shows here; open the note under any option to see why.
Note on A
A wireless access point bridges wireless clients onto the wired LAN at Layer 2.
Note on B
Correct: a router is a Layer 3 device that forwards packets between networks by looking up the destination IP address in its routing table.
Note on C
A Layer 2 switch forwards frames by MAC address and does not use IP addresses to decide.
Note on D
A hub works at Layer 1 and repeats electrical signals out every port without reading any address.
Best answer: B · why
Each device type works at the layer whose addresses it reads. Hubs repeat bits (Layer 1). Layer 2 switches and access points forward frames by MAC address (Layer 2). Routers, and Layer 3 switches, forward packets by destination IP address using a routing table (Layer 3).
- Frame 014 of 018
Which issue might occur when two connected network devices are configured with different duplex settings?
Pick an option. The verdict shows here; open the note under any option to see why.
Note on A
An IP address conflict happens when two hosts use the same address. Duplex settings work at the physical layer and cannot cause it.
Note on B
Routing loops come from Layer 3 routing errors. A duplex mismatch affects only the single link between the two devices.
Note on C
Correct. The half-duplex end sees the full-duplex end transmit over its own frame and logs late collisions, plus CRC errors on the other end.
Note on D
VLAN hopping is an attack that abuses trunking or double tagging. It is not caused by a duplex setting.
Best answer: C · why
With a duplex mismatch, one end of a link runs full duplex and sends whenever it likes, while the other runs half duplex and expects to detect collisions. When both transmit at once, the half-duplex side detects collisions, and those that arrive after the first 64 bytes of its frame are counted as late collisions. The full-duplex side sees damaged frames as CRC or runt errors. The link stays up but performs badly. Matching speed and duplex, or autonegotiating on both ends, fixes it.
- Frame 015 of 018
Which network topology uses a centralized switch or hub to manage data communication between connected devices?
Pick an option. The verdict shows here; open the note under any option to see why.
Note on A
Correct: in a star topology every device connects to a central switch (or, historically, a hub) that carries all communication between them.
Note on B
A bus has no central device; all stations share one cable.
Note on C
A mesh links devices directly to each other instead of through a central point.
Note on D
A ring passes data from neighbor to neighbor around a loop, with no central device.
Best answer: A · why
In a star topology, every device has its own cable to a central device: a switch today, a hub in older networks. A cable failure affects only one device, but the central device is a single point of failure. Modern Ethernet LANs are physically star-shaped, and an extended star links several stars together.
- Frame 016 of 018
What technology allows multiple physical servers to appear as a single logical server to the network?
Pick an option. The verdict shows here; open the note under any option to see why.
Note on A
NAT rewrites addresses as packets cross a boundary; it can hide many hosts behind one address, but it does not make servers share a workload as one logical server.
Note on B
Correct: a cluster groups physical servers behind one logical identity, so clients see a single server while the members share load and cover for each other’s failures.
Note on C
Link aggregation bundles several physical links into one logical link; it merges cables between two devices, not servers into one system.
Note on D
VLAN trunking carries several VLANs over one link with 802.1Q tags; it separates traffic and does nothing to merge servers.
Best answer: B · why
Server clustering allows multiple physical servers to appear as a single logical server to the network. This provides benefits such as load balancing, high availability, and fault tolerance. If one server in the cluster fails, the others can take over its workload, minimizing downtime and ensuring continuous service availability.
- Frame 017 of 018
Which layer of the OSI model is responsible for end-to-end communication and error-free data delivery?
Pick an option. The verdict shows here; open the note under any option to see why.
Note on A
Layer 3 handles logical addressing and path selection between networks; it moves packets hop by hop but does not promise reliable delivery between the two hosts.
Note on B
Correct: the transport layer (Layer 4) is where TCP provides end-to-end sessions with sequencing, acknowledgments and retransmission.
Note on C
Layer 1 deals with bits on the medium, such as voltages, light pulses and connectors; it has no idea of a session or of lost data.
Note on D
Layer 2 frames traffic for one link and checks the FCS, but it works hop by hop and drops bad frames instead of recovering them end to end.
Best answer: B · why
Layer 4, the transport layer, owns end-to-end communication between hosts. TCP at this layer delivers data in sequence, acknowledges it and retransmits anything lost. UDP works at the same layer but leaves reliability to the application. Layers 1 to 3 move bits, frames and packets but do not guarantee delivery between the two end hosts.
- Frame 018 of 018
Which of the following is a characteristic of cloud networking compared to on-premises networking?
Pick an option. The verdict shows here; open the note under any option to see why.
Note on A
Cloud resources may sit far from users, so latency can be higher, not lower; on-premises gear close to users often wins on delay.
Note on B
Full control of the physical hardware is what on-premises keeps; in the cloud the provider owns and runs the hardware.
Note on C
Correct: cloud networking is billed by consumption, so you pay for capacity as you use it instead of buying hardware up front.
Note on D
Compliance becomes a responsibility shared with the provider; it is not automatically simpler, and some rules can be harder to meet.
Best answer: C · why
One key characteristic of cloud networking compared to on-premises networking is the consumption-based cost model, where organizations pay for resources as they use them rather than making large upfront capital investments in hardware. This enables more flexible scaling and potentially lower initial costs. Cloud networks also typically offer greater elasticity, global reach, and less physical infrastructure management.
Questions about this study area
Is the OSI model on the CCNA exam?
Not as a numbered item of its own in Cisco’s v1.1 exam topics (checked October 29, 2026). The layer vocabulary runs through the whole blueprint instead: Layer 2 and Layer 3 switches in 1.1, ports at the transport layer in 1.5. The figure above maps the seven OSI layers onto the four TCP/IP layers.
What counts as a WAN in the topic list?
A wide area network joins sites over distances a LAN cannot cover, usually over a provider’s service. Topic 1.2 lists it beside two-tier, three-tier, spine-leaf and SOHO. SD-WAN applies the controller-based model to the WAN; the controller ideas behind it are on the automation, APIs and AI page.
Which interface counters point to a cabling fault?
Input errors and CRC errors that keep climbing usually trace back to the physical layer: a damaged cable, a poor connector or a run longer than it is rated for. A port that keeps going down and up tells the same story. show interfaces prints these counters for each interface.
Concepts in this study area
- TCP vs UDPHandshake and acknowledgments vs connectionless delivery, and which apps ride which.