Practice for the CCNA exam with 21 exam-style practice questions, instant answer reveals, and concise explanations of every correct answer. Topics include: What is a function of spine-and-leaf architecture?. Follow @CertPunch and visit certpunch.com for more certification practice exams and study content.
Prefer hands-on? Take this round as an interactive practice test — answer every question, get instant feedback, and see your score: Start the CCNA 2026 practice test →
What you will practice
- What is a function of spine-and-leaf architecture?
- What is the benefit of using private IPv4 addressing?
- Which action implements physical access control as part of the security program of an organization?
- A network administrator wants the syslog server to filter incoming messages into different files based on the…
- What is a benefit of using private IPv4 addressing?
- How does Cisco DNA Center gather data from the network?
Answers and explanations
Tap a question to expand the answer and the exam reasoning. Try to commit to your own pick first.
Q1. What is a function of spine-and-leaf architecture?
Answer: A. A. Offers predictable latency of the traffic path between end devices.
Spine-and-leaf architecture provides predictable latency because every leaf connects to every spine, ensuring equal hop counts. Distractors mentioning oversubscription or multicast exclusivity are incorrect because fabric scalability handles growth, not added layers.
Q2. What is the benefit of using private IPv4 addressing?
Answer: B. B. to shield internal network devices from external access
Private IPv4 addresses are not routable on the public internet, hiding internal devices from direct external access. Incorrect options suggesting internet routing or secure connectivity misunderstand private addressing limits.
Q3. Which action implements physical access control as part of the security program of an organization?
Answer: A. A. setting up IP cameras to monitor key infrastructure
Setting up IP cameras provides surveillance and supports physical access control. The other options represent logical access controls, such as configuring console or enable passwords and backing up logs.
Q4. A network administrator wants the syslog server to filter incoming messages into different files based on their importance. Which filtering criteria must be used?
Answer: B. B. level
Syslog severity levels categorize messages by importance from emergencies to debugging. Filtering by facility would sort by the source process instead, so level is required to meet the requirement.
Q5. What is a benefit of using private IPv4 addressing?
Answer: A. A. Multiple companies can use the same addresses without conflicts.
Private IPv4 addresses are not globally routable, allowing different organizations to reuse the same ranges internally without conflict. Options mentioning direct internet access without NAT violate RFC 1918 rules, eliminating those distractors.
Q6. How does Cisco DNA Center gather data from the network?
Answer: D. D. Network devices use different services like SNMP, syslog, and streaming telemetry to send data to the controller
Cisco DNA Center collects device data using standard network protocols like SNMP, syslog, and streaming telemetry. The controller does not rely on IPsec tunnels for data collection, weakening the security tunneling distractor.
Q7. What is a syslog facility?
Answer: D. D. set of values that represent the processes that can generate a log message
A syslog facility is a numerical value identifying the process or service generating the log message, such as IP or local seven. Facilities separate from severity levels, which weakens the severity grouping distractor.
Q8. Which effect does the aaa new-model configuration command have?
Answer: A. A. It enables AAA services on the device.
The aaa new-model command globally enables authentication, authorization, and accounting services on a Cisco device. You must configure servers or local users separately, weakening the RADIUS and local user distractors.
Q9. Why is UDP more suitable than TCP for applications that require low latency, such as VoIP?
Answer: D. D. TCP sends an acknowledgment for every packet that is received, and UDP operates without acknowledgments.
TCP adds latency by requiring acknowledgments and retransmissions for reliable delivery. UDP operates without acknowledgments, making it suitable for real-time applications like VoIP where low delay is prioritized over reliability.
Q10. Which WAN access technology is preferred for a small office / home office architecture?
Answer: A. A. broadband cable access
Broadband cable access is preferred for SOHO environments because it is cost-effective and provides sufficient bandwidth. Frame Relay, ISDN, and dedicated leased lines are either obsolete or too expensive for small offices.
Q11. What is a similarity between OM3 and OM4 fiber optic cable?
Answer: C. C. Both have a 50 micron core diameter.
OM3 and OM4 are both laser-optimized multimode fiber types that use a 50 micron core diameter. This core size differentiates them from older 62.5 micron multimode fiber and standard 9 micron single-mode fiber.
Q12. Which mechanism best protects against rogue DHCP servers by allowing DHCP replies only from trusted ports?
Answer: A. A. DHCP snooping
DHCP snooping mitigates rogue servers by classifying ports as trusted or untrusted. The switch drops DHCP server messages arriving on untrusted ports, preventing malicious address assignment.
Q13. Which device separates networks by security domains?
Answer: B. B. firewall
Firewalls create security boundaries between network segments. By controlling traffic flow between trusted and untrusted zones, they establish distinct security domains that other devices like switches or access points do not inherently define.
Q14. When a WLAN with WPA2 PSK is configured in the Wireless LAN Controller GUI, which format is supported?
Answer: B. B. ASCII
Cisco WLC supports entering an ASCII passphrase for WPA2-PSK. Unicode, decimal, and Base64 are not accepted as valid input formats for this field. Eliminate invalid encoding types to select the proper alphanumeric format.
Q15. A wireless access point is needed and must meet these requirements: deployed and managed "zero-touch" by a WLC, process only real-time MAC functionality, and used in a split-MAC architecture. Which access point type must be used?
Answer: C. C. lightweight
Lightweight access points rely on a wireless LAN controller for centralized management and use a split-MAC architecture where real-time MAC functions stay local. Autonomous and cloud-based access points do not natively support this controller-based split-MAC division of labor.
Q16. What does the PUT method within HTTP do?
Answer: A. A. It replaces data at the destination.
The HTTP PUT method creates or completely replaces data at a specific destination URI. It is considered idempotent, meaning repeated identical requests yield the same result, which differentiates it from non-idempotent operations like POST.
Q17. What makes Cisco DNA Center different from traditional network management applications and their management of networks?
Answer: D. D. It abstracts policy from the actual device configuration.
Cisco DNA Center leverages intent-based networking by abstracting business policy away from the underlying device-level configurations. Traditional management applications require manual, device-by-device command-line configuration, lacking this automated translation of intent.
Q18. Which 802.11 frame type is indicated by a probe response after a client sends a probe request?
Answer: B. B. management
Probe requests and probe responses are 802.11 management frames used during the wireless discovery phase. Data frames carry actual user traffic, while control frames assist with media access and delivery reliability rather than network discovery.
Q19. A network analyst is tasked with configuring the date and time on a router using privileged EXEC mode. The date must be set to January 1, 2020 and the time must be set to 12:00 am. Which command must be used?
Answer: D. D. clock set
The privileged EXEC mode command clock set manually configures the system date and time on a Cisco router. The other options relate to time zone or daylight saving time configurations and cannot directly set the absolute hardware clock values.
Q20. What is a characteristic of a SOHO network?
Answer: C. C. enables multiple users to share a single broadband connection
A SOHO network typically allows multiple users and devices to share a single broadband Internet connection through a small router. The other options describe large enterprise architectures, such as three-tier hierarchical designs, rather than small office deployments.
Q21. How does TFTP operate in a network?
Answer: C. C. Uses block numbers to identify and mitigate data-transfer errors
TFTP uses block numbers and acknowledgments to ensure data integrity during transfers. Because it relies on connectionless UDP rather than TCP, options mentioning secure transfer, TCP port 20, or dual connections incorrectly describe FTP instead.
More CCNA 2026 drills and other practice exams are on @CertPunch. New rounds drop every few days at certpunch.com.