Master the CCNA 2 v7.02 & v8 (Switching, Routing, and Wireless Essentials - SRWE) Final Exam with our verified question bank. This module covers VLANs, 802.1Q Trunking, Rapid PVST+ (RSTP), LACP/PAgP EtherChannel, DHCPv4/SLAAC, FHRP (HSRP), and WLC wireless security.
📥 Download CCNA 2 (SRWE v7.02) PT Skills Assessment (.PKA) & CLI Cheat Sheet
Includes complete Inter-VLAN Routing (Router-on-a-Stick & L3 Switch SVI), LACP EtherChannel, and Port Security labs.
Verified Exam Questions & Interactive Explanations
Question 1
Two Cisco switches are interconnected, and both interfaces are configured with 'switchport mode dynamic auto'. Why does a trunk link fail to form between them?
✔ Correct Answer: A. Both ends are set to dynamic auto, so neither side actively initiates DTP trunk negotiation.
Technical Explanation: In Cisco Dynamic Trunking Protocol (DTP),
dynamic auto is a passive mode that only responds to DTP requests. If both sides are set to dynamic auto, neither initiates trunking and the link remains an access link. At least one side must be trunk or dynamic desirable.
Question 2
An administrator wants to add VLAN 30 to an existing trunk that currently carries VLANs 10 and 20. The administrator enters 'switchport trunk allowed vlan 30'. What is the result?
✔ Correct Answer: B. The command overwrites the existing allowed list, so ONLY VLAN 30 is carried and VLANs 10 and 20 are pruned.
Technical Explanation: Omitting the
add keyword (i.e., typing switchport trunk allowed vlan 30 instead of switchport trunk allowed vlan add 30) replaces the entire allowed VLAN list with only VLAN 30, causing an immediate outage for VLANs 10 and 20.
Question 3
Which Spanning Tree Protocol (STP) standard provides rapid convergence within a few seconds by introducing Alternate and Backup port roles?
✔ Correct Answer: B. IEEE 802.1w (Rapid Spanning Tree Protocol - RSTP)
Technical Explanation: RSTP (IEEE 802.1w)—and Cisco's Rapid PVST+—replaces the slow 30–50 second 802.1D timers with an active proposal/agreement handshake, converging in sub-seconds and utilizing Discarding, Learning, and Forwarding states.
Question 4
Which LACP mode combination will successfully establish an IEEE 802.3ad EtherChannel bundle between Switch1 and Switch2?
✔ Correct Answer: B. Active on Switch1 and Passive on Switch2
Technical Explanation: LACP (IEEE 802.3ad) uses
active and passive modes (whereas Cisco proprietary PAgP uses desirable and auto). An EtherChannel forms with Active/Active or Active/Passive.
Question 5
Which Port Security violation mode silently drops traffic from unauthorized MAC addresses without incrementing the violation counter or sending an SNMP trap?
✔ Correct Answer: C. Protect
Technical Explanation: Cisco Port Security supports three modes:
• Protect: Drops unauthorized frames silently (no syslog, no counter increment).
• Restrict: Drops frames, sends Syslog/SNMP trap, and increments violation counter.
• Shutdown (Default): Places the port into
• Protect: Drops unauthorized frames silently (no syslog, no counter increment).
• Restrict: Drops frames, sends Syslog/SNMP trap, and increments violation counter.
• Shutdown (Default): Places the port into
err-disabled state immediately.
Question 6
To mitigate DHCP Spoofing (Rogue DHCP Server) attacks on a Layer 2 switch, how should DHCP Snooping trust states be configured?
✔ Correct Answer: B. Untrust all access ports by default; configure 'ip dhcp snooping trust' on uplink ports leading to the legitimate DHCP server.
Technical Explanation: When DHCP Snooping is enabled globally, all interfaces default to untrusted (blocking incoming DHCP Offer/ACK server messages). You must explicitly configure
ip dhcp snooping trust on the uplink/trunk ports leading to the authorized DHCP server.
Question 7
In an HSRP (Hot Standby Router Protocol) group, Router R1 has priority 150 and Router R2 has the default priority of 100. If R1 reboots and comes back online, what command ensures R1 reclaims the Active router role?
✔ Correct Answer: A. standby 1 preempt
Technical Explanation: By default, HSRP does not preempt an existing Active router even if a router with a higher priority comes online. Adding
standby [group] preempt forces the higher-priority router to coup and reclaim the Active forwarding role.
Question 8
Which protocol is used by Cisco Lightweight Access Points (LAPs) to communicate with a Wireless LAN Controller (WLC) over UDP ports 5246 and 5247?
✔ Correct Answer: A. CAPWAP
Technical Explanation: CAPWAP (Control and Provisioning of Wireless Access Points) encapsulates control messages (UDP 5246, encrypted via DTLS) and wireless client data traffic (UDP 5247) between Lightweight APs and the WLC.
Cisco IOS LACP EtherChannel, Trunking & DHCP Snooping CLI
Cisco IOS CLI - Verification & Configuration
! 1. Configure LACP EtherChannel (802.3ad) & 802.1Q Trunk: SW1(config)# interface range GigabitEthernet0/1 - 2 SW1(config-if-range)# channel-group 1 mode active SW1(config-if-range)# exit SW1(config)# interface Port-channel 1 SW1(config-if)# switchport mode trunk SW1(config-if)# switchport trunk native vlan 99 SW1(config-if)# switchport trunk allowed vlan 10,20,30,99 SW1(config-if)# exit ! 2. Enable DHCP Snooping & Dynamic ARP Inspection (DAI): SW1(config)# ip dhcp snooping SW1(config)# ip dhcp snooping vlan 10,20,30 SW1(config)# no ip dhcp snooping information option SW1(config)# ip arp inspection vlan 10,20,30 SW1(config)# interface Port-channel 1 SW1(config-if)# ip dhcp snooping trust SW1(config-if)# ip arp inspection trust SW1(config-if)# end SW1# show etherchannel summary