Practice for the CCNA exam with 22 exam-style practice questions, instant answer reveals, and concise explanations of every correct answer. Topics include: When configuring an EtherChannel bundle, which mode enables LACP only if a LACP device is detected?. Follow @CertPunch and visit certpunch.com for more certification practice exams and study content.
Prefer hands-on? Take this round as an interactive practice test — answer every question, get instant feedback, and see your score: Start the CCNA 2026 practice test →
What you will practice
- When configuring an EtherChannel bundle, which mode enables LACP only if a LACP device is detected?
- How does CAPWAP communicate between an access point in local mode and a WLC?
- Which statement describes network endpoints?
- What should a network administrator consider when deciding to implement automation?
- Which command is used to verify the DHCP relay agent address that has been set up on your Cisco IOS router?
- Which function generally performed by a traditional network device is replaced by a software-defined controll…
Answers and explanations
Tap a question to expand the answer and the exam reasoning. Try to commit to your own pick first.
Q1. When configuring an EtherChannel bundle, which mode enables LACP only if a LACP device is detected?
Answer: A. A. Passive
Passive mode enables the Link Aggregation Control Protocol but waits to respond to inbound LACP packets rather than initiating negotiation. It will only form an EtherChannel if the neighboring device is actively running LACP. Active mode continuously initiates LACP negotiation.
Q2. How does CAPWAP communicate between an access point in local mode and a WLC?
Answer: D. D. The access point has the ability to link to any switch in the network, assuming connectivity to the WLC
A lightweight access point uses CAPWAP to form control and data tunnels with the wireless LAN controller over the IP network. The access point only requires Layer 3 connectivity to the controller, allowing it to connect through any intermediate switches and routers.
Q3. Which statement describes network endpoints?
Answer: A. A. devices such as PCs, laptops, IP phones, printers, and IoT devices that connect to the network and act as sources or destinations of data
Network endpoints are devices that connect to the network to act as sources or destinations for data traffic. Common examples include personal computers, IP phones, and printers. They are distinctly different from infrastructure devices like routers and switches which forward traffic.
Q4. What should a network administrator consider when deciding to implement automation?
Answer: D. D. Manual changes frequently lead to configuration errors and inconsistencies.
Network automation is primarily implemented to reduce manual configuration errors and improve consistency across the infrastructure. Manual changes frequently lead to misconfigurations and network outages. Automation scales easily and generally reduces operating costs by streamlining management.
Q5. Which command is used to verify the DHCP relay agent address that has been set up on your Cisco IOS router?
Answer: D. D. show running-config
The show running-config command displays the current configuration, including the IP helper addresses configured under specific interfaces. The show IP DHCP pool and bindings commands only display local server lease information, making them incorrect for relay verification.
Q6. Which function generally performed by a traditional network device is replaced by a software-defined controller?
Answer: A. A. building route tables and updating the forwarding table
A software-defined network controller centralizes the control plane, replacing the traditional distributed function of building route tables and updating forwarding information. Data plane tasks like packet encapsulation, NAT, and encryption remain on the local devices.
Q7. Which advantage does the network assurance capability of Cisco DNA Center provide over traditional campus management?
Answer: D. D. Cisco DNA Center correlates information from different management protocols to obtain insights, and traditional campus management requires manual analysis.
Cisco DNA Center Assurance automatically correlates telemetry from multiple management protocols to provide proactive insights and root cause analysis. Traditional campus management relies on manual analysis of disparate logs, which eliminates the other options.
Q8. A network engineer starts to implement a new wireless LAN by configuring the authentication server and creating the dynamic interface. What must be performed next to complete the basic configuration?
Answer: A. A. Create the new WLAN and bind the dynamic interface to it.
After configuring a RADIUS server and creating a dynamic interface, the next required step is to create the WLAN and bind it to that interface. Without this binding, client traffic cannot be mapped to the correct VLAN.
Q9. Which configuration command can you apply to a HSRP router so that its local interface becomes active if all other routers in the group fail? Correct answer
Answer: A. A. no additional config is required
HSRP failover is an inherent feature, meaning the standby router automatically assumes the active role if the current active router fails. No preempt configuration is needed for standard failover, as preempt only affects reclaiming the active role.
Q10. What is a function of MAC learning on a switch?
Answer: D. D. The switch learns source MAC addresses from incoming frames and adds them to the MAC address table.
MAC learning occurs when a switch examines the source MAC address of incoming frames and records it alongside the receiving port in the MAC address table. Unknown unicast frames are flooded, not dropped, until the destination is learned.
Q11. Which command configures the time a port spends in the listening and learning states in STP?
Answer: D. D. switch(config)#spanning-tree vlan 1 forward-time 20
The forward-time parameter configures the duration a port stays in the listening and learning states before transitioning to forwarding. The max-age and hello-time parameters control separate STP convergence timers.
Q12. Which feature on the Cisco Wireless LAN Controller when enabled restricts management access from specific networks?
Answer: B. B. CPU ACL
A CPU ACL restricts management access to the wireless LAN controller by filtering traffic destined for its control plane. TACACS and RADIUS handle authentication and authorization, but they do not directly filter network access.
Q13. How is a configuration change made to a wireless AP in lightweight mode?
Answer: B. B. CAPWAP/LWAPP connection via the parent WLC
Lightweight access points are managed centrally through a CAPWAP tunnel connected to the wireless LAN controller. Direct SSH or web access is not used because the AP relies on the controller for all configuration updates.
Q14. Which syslog severity level includes informational messages?
Answer: D. D. debug
Setting a logging level includes that level and all higher severity levels. Choosing level 7, debug, captures everything down to level 6 informational messages, whereas lower numeric levels filter them out.
Q15. Which WLC interface provides out-of-band management in the Cisco Unified Wireless Network Architecture?
Answer: B. B. service port
The service port on a Cisco wireless LAN controller is dedicated to out-of-band management. It operates independently of the production data interfaces and is used for recovery and maintenance tasks.
Q16. When OSPF learns multiple paths to a network, how does it select a route?
Answer: C. C. It divides a reference bandwidth of 100 Mbps by the actual bandwidth of the exiting interface to calculate the route with the lowest cost.
OSPF calculates route cost by dividing a reference bandwidth by the interface bandwidth. The protocol selects the path with the lowest cumulative cost, eliminating hop-count and K-value distractors.
Q17. Which port security violation mode allows traffic from valid MAC addresses to pass but blocks traffic from invalid MAC addresses?
Answer: C. C. protect
Port security protect mode silently drops frames from unauthorized MAC addresses while allowing valid traffic. Restrict mode similarly drops traffic but increments violation counters and logs alerts.
Q18. Which option best describes an API?
Answer: A. A. a contract that describes how various components communicate and exchange data with each other
An application programming interface acts as a contract defining how software components exchange data. It allows interaction between systems without exposing internal code.
Q19. An engineer must configure traffic for a VLAN that is untagged by the switch as it crosses a trunk link. Which command should be used?
Answer: D. D. switchport trunk native vlan 10
In IEEE 802.1Q trunking, the native VLAN is forwarded without a tag. The switchport trunk native vlan command assigns this specific untagged VLAN.
Q20. What is a similarity between global and unique local IPv6 addresses?
Answer: A. A. They use the same process for subnetting.
Both global unicast and unique local IPv6 addresses utilize the same subnetting mechanics, typically allocating 64-bit prefixes for local networks. Unique local addresses, however, are not routed on the global internet.
Q21. Two switches are connected and using Cisco Dynamic Trunking Protocol. SW1 is set to dynamic auto and SW2 is set to dynamic desirable. What is the result of this configuration?
Answer: D. D. The link becomes a trunk port.
Dynamic desirable actively tries to form a trunk, while dynamic auto passively waits for trunking requests. Combining these modes results in a successful trunk link.
More CCNA 2026 drills and other practice exams are on @CertPunch. New rounds drop every few days at certpunch.com.