Practice for the CCNA exam with 22 exam-style practice questions, instant answer reveals, and concise explanations of every correct answer. Topics include: What is a characteristic of an SSID in wireless networks?. Follow @CertPunch and visit certpunch.com for more certification practice exams and study content.
Prefer hands-on? Take this round as an interactive practice test — answer every question, get instant feedback, and see your score: Start the CCNA 2026 practice test →
What you will practice
- Which VLAN is the default VLAN on Cisco switches?
- What is the difference regarding reliability and communication type between TCP and UDP?
- Which action does the router take as it forwards a packet through the network?
- Which function does an SNMP agent perform?
- Which interface on the WLC is limited to one when LAG is in use?
- Which command is used to specify the delay time in seconds for LLDP to initialize on any interface?
Answers and explanations
Tap a question to expand the answer and the exam reasoning. Try to commit to your own pick first.
Q1. Which VLAN is the default VLAN on Cisco switches?
Answer: B. B. VLAN 1
VLAN 1 is the default VLAN on Cisco switches. By default, all switch ports are assigned to VLAN 1 for management and control traffic until explicitly reassigned to a different VLAN.
Q2. What is the difference regarding reliability and communication type between TCP and UDP?
Answer: D. D. TCP is reliable and is a connection-oriented protocol; UDP is not reliable and is a connectionless protocol.
TCP is a reliable, connection-oriented protocol that establishes a session and uses acknowledgments to guarantee delivery. UDP is a connectionless protocol that trades reliability for speed by omitting these overhead mechanisms.
Q3. Which action does the router take as it forwards a packet through the network?
Answer: C. C. The router replaces the original source and destination MAC addresses with the sending router MAC address as the source and neighbor MAC address as the destination.
Routers decapsulate the Layer 2 frame to read the Layer 3 packet, then build a brand new frame for the next hop. The outgoing frame uses the router's interface MAC as the source and the next hop's MAC as the destination.
Q4. Which function does an SNMP agent perform?
Answer: A. A. It sends information about MIB variables in response to requests from the NMS
An SNMP agent resides on a managed network device and collects data into a Management Information Base. It responds to polling requests from the Network Management System and can proactively send trap messages.
Q5. Which interface on the WLC is limited to one when LAG is in use?
Answer: D. D. AP-manager
When Link Aggregation is enabled on a Wireless LAN Controller, all physical ports bundle into one logical path. Due to this hashing limitation, the controller supports exactly one AP-manager interface.
Q6. Which command is used to specify the delay time in seconds for LLDP to initialize on any interface?
Answer: C. C. lldp reinit
The LLDP reinit command specifies the delay time in seconds before LLDP will reinitialize on an interface. Remember that the timer command adjusts update frequency, while holdtime dictates how long neighbors cache the data.
Q7. What is the purpose of the Cisco DNA Center controller?
Answer: A. A. to securely manage and deploy network devices
Cisco DNA Center serves as a centralized controller to securely manage and deploy network devices using automation and assurance. It is an orchestration platform, not a localized Layer 3 routing service for autonomous access points.
Q8. What is the primary purpose of private address space?
Answer: C. C. conserve globally unique address space
Private IP addressing defined in RFC 1918 was established to conserve globally unique public IPv4 addresses. This allows internal networks to reuse addresses without consuming limited public internet space.
Q9. Which action must be taken to assign a global unicast IPv6 address on an interface that is derived from the MAC address of that interface?
Answer: C. C. enable SLAAC on an interface
Stateless Address Autoconfiguration allows a device to generate a global unicast IPv6 address using the EUI-64 process based on its MAC address. Stateful DHCPv6 assigns addresses without relying on the local MAC.
Q10. What does a router do when it is configured with the default DNS lookup settings, and a URL is entered on the CLI?
Answer: D. D. It attempts to query a DNS server on the network.
By default, Cisco routers have DNS lookup enabled and will attempt to resolve unrecognized commands as hostnames by querying a DNS server. If no server is configured, the router will time out after repeated attempts.
Q11. Which is a reason to implement IPv4 private addressing?
Answer: B. B. Conserve public IPv4 address space.
Private IPv4 addressing conserves the limited global public IP address space. While security by obscurity occurs, it is not the primary reason. Regulatory compliance distractors are completely unrelated to IP address allocation.
Q12. What is a function of a southbound API?
Answer: C. C. Manage flow control between an SDN controller and a switching fabric
A southbound API manages communication between the SDN controller and the network switching fabric. Northbound APIs handle communication with applications, making the application exchange option a distractor.
Q13. What is a role of access points in an enterprise network?
Answer: C. C. connect wireless devices to a wired network
Access points bridge wireless clients to a wired network infrastructure. They translate radio frequency signals to Ethernet. Security and login functions are handled by firewalls and authentication servers.
Q14. Which statement describes a collapsed-core architecture?
Answer: C. C. The core and distribution layers are combined on a single device or a redundant pair of devices.
A collapsed-core architecture combines the core and distribution layers onto a single device. This simplifies the network design. Three-tier designs keep the core and distribution layers on separate hardware.
Q15. Which action is taken by switch port enabled for PoE power classification override?
Answer: A. A. If a monitored port exceeds the maximum administrative value for power, the port is shutdown and err-disabled.
PoE power classification override enforces a strict administrative maximum. If a device exceeds this limit, the switch shuts down the port to protect the power budget. Options describing syslog messages or temporary pauses are incorrect.
Q16. With REST API, which standard HTTP header tells a server which media type is expected by the client?
Answer: D. D. Accept: application/json
The Accept header specifies the media type the client expects in the response. Content-Type is a distractor here because it defines the format of the payload being sent to the server.
Q17. An Ethernet frame arrived at switch interface G0/1, but the destination MAC address is missing from the MAC address table. How does the switch process the frame?
Answer: D. D. It floods the frame out of the remaining switch interfaces.
When a switch receives a frame with an unknown destination MAC address, it performs unknown unicast flooding. The frame is forwarded out all active ports in the receiving VLAN except the ingress port. Switches do not route ARP requests themselves; endpoints resolve MAC addresses.
Q18. A network engineer is configuring a new router at a branch office. The router is connected to an upstream WAN network that allows the branch to communicate with the head office. The central time server with IP address 172.24.54.8 is locate…
Answer: A. A. ntp server 172.24.54.8
The ntp server command configures the router to synchronize its software clock with a specified external NTP server. This allows the router to act as a client and obtain time updates. The ntp peer command is used for symmetric peer associations, and ntp client is invalid.
Q19. Why would VRRP be implemented when configuring a new subnet in a multivendor environment?
Answer: D. D. to provide a standards-based default gateway redundancy protocol that interoperates across multiple vendors
The Virtual Router Redundancy Protocol is an open standard that provides default gateway redundancy across multiple vendors. In a mixed environment, proprietary protocols like Cisco's HSRP are avoided to ensure interoperability. VRRP provides a standards-based approach to gateway redundancy.
Q20. A network engineer must configure the router R1 GigabitEthernet1/1 interface to connect to the router R2 GigabitEthernet1/1 interface. For the configuration to be applied, the engineer must compress the address 2001:0db8:0000:0000:0500:000…
Answer: C. C. ipv6 address 2001:db8::500:a:400F:583B
IPv6 address compression involves removing leading zeros from each hextet and replacing one contiguous block of zero hextets with a double colon. The address is correctly compressed as 2001:db8::500:a:400F:583B. You can only use the double colon once in an IPv6 address.
More CCNA 2026 drills and other practice exams are on @CertPunch. New rounds drop every few days at certpunch.com.