Practice for the CCNA exam with 23 exam-style practice questions, instant answer reveals, and concise explanations of every correct answer. Topics include: Refer to the exhibit. What does apple represent within the JSON data?. Follow @CertPunch and visit certpunch.com for more certification practice exams and study content.
Prefer hands-on? Take this round as an interactive practice test — answer every question, get instant feedback, and see your score: Start the CCNA 2026 practice test →
What you will practice
- Refer to the exhibit. What does apple represent within the JSON data?
- Refer to the exhibit. If configuring a static default route on the router with the ip route 0.0.0.0 0.0.0.0 1…
- Refer to the exhibit. Which password must an engineer use to enter the enable mode?
- Refer to the exhibit. An engineer is asked to insert the new VLAN into the existing trunk without modifying a…
- Refer to the exhibit. How many JSON objects are represented?
- Refer to the exhibit. How will the device handle a packet destined to IP address 100.100.100.100?
Answers and explanations
Tap a question to expand the answer and the exam reasoning. Try to commit to your own pick first.
Q1. Refer to the exhibit. What does apple represent within the JSON data?
Answer: D. D. string
In JSON format, keys must always be strings enclosed in double quotation marks. The identifier represents a string key paired with its corresponding value, distinguishing it from arrays or numbers.
Q2. Refer to the exhibit. If configuring a static default route on the router with the ip route 0.0.0.0 0.0.0.0 10.13.0.1 120 command, how does the router respond?
Answer: D. D. It ignores the new static route until the existing OSPF default route is removed.
Routing decisions are determined by administrative distance when multiple sources provide the same prefix. Because the existing OSPF route has a lower administrative distance of 110, it is preferred over the new static route assigned an administrative distance of 120.
Q3. Refer to the exhibit. Which password must an engineer use to enter the enable mode?
Answer: D. D. testing1234
The enable secret command overrides the standard enable password for privileged EXEC mode access. Therefore, testing1234 is the required password, making the other configured passwords irrelevant distractors.
Q4. Refer to the exhibit. An engineer is asked to insert the new VLAN into the existing trunk without modifying anything previously configured. Which command accomplishes this task?
Answer: D. D. switchport trunk allowed vlan add 104
The add keyword appends a specific VLAN to the existing allowed list on a trunk link. Without this keyword, the command would overwrite the current list and break connectivity for previously allowed VLANs.
Q5. Refer to the exhibit. How many JSON objects are represented?
Answer: A. A. 1
A single pair of enclosing curly braces defines exactly one JSON object. Internal arrays and key-value pairs belong to that parent structure and do not create additional distinct objects.
Q6. Refer to the exhibit. How will the device handle a packet destined to IP address 100.100.100.100?
Answer: D. D. It will choose the route with the longest match, O 100.100.100.100/32 [110/21] via 192.168.1.1, 00:05:57, Ethernet0/1.
Cisco routers always forward packets using the longest matching prefix in the routing table. A 32-bit host route is the most specific match available, overriding administrative distance and metric.
Q7. Refer to the exhibit. How does the router manage traffic to 192.168.12.16?
Answer: D. D. It selects the RIP route because it has the longest prefix inclusive of the destination address.
The router selects the route with the longest prefix length when multiple routes match the destination. A 27-bit prefix is more specific than a 24-bit prefix, so the router uses the RIP route.
Q8. Refer to the exhibit. A network engineer executes the show ip route command on router D. What is the next hop to network 192.168.1.0/24 and why?
Answer: D. D. The next hop is 10.0.0.1 because it has a better administrative distance.
When a router learns the same destination network from multiple routing protocols, administrative distance breaks the tie. Internal EIGRP has a lower administrative distance than OSPF. Therefore, the router prefers the EIGRP route via 10.0.0.1.
Q9. Refer to the exhibit. A network engineer is adding another physical interface as a new member to the existing Port-Channel1 bundle. Which command set must be configured on the new interface to complete the process?
Answer: C. C. switchport mode trunk channel-group 1 mode active
Layer two EtherChannel requires the physical interface to match the logical port-channel configuration. Setting trunk mode and channel-group one mode active ensures compatibility with the existing LACP bundle. Other options omit the active LACP negotiation command.
Q10. Refer to the exhibit. Which outcome is expected when PC_A sends data to PC_B after their initial communication?
Answer: C. C. The source and destination MAC addresses remain the same.
Switches forward frames within the same VLAN without altering the source and destination MAC addresses. Because both PCs belong to VLAN 200, unicast frames traverse the switch intact. Switches never rewrite MAC addresses with their own.
Q11. Refer to the exhibit. An administrator must configure interfaces Gi1/1 and Gi1/3 on switch SW11. PC-1 and PC-2 must be placed in the Data VLAN, and Phone-1 must be placed in the Voice VLAN. Which configuration meets these requirements?
Answer: A. A.
Access ports assign untagged data traffic to the access VLAN while the voice VLAN tags phone traffic. Configuring both interfaces for VLAN 8 and applying the voice VLAN command on the phone interface satisfies the requirements. Trunk mode is unnecessary for edge devices.
Q12. Refer to the exhibit. Assume DHCP snooping is enabled and valid bindings exist for VLAN 5. What is the effect of this configuration?
Answer: A. A. The switch discards all ingress ARP traffic with invalid MAC-to-IP address bindings.
Dynamic ARP Inspection intercepts and validates ARP packets against DHCP snooping bindings. Untrusted ports drop ARP traffic with invalid IP-to-MAC address mappings. The switch does not drop all ARP packets or restrict general egress traffic.
Q13. Refer to the exhibit. With which metric does router R1 learn the route to host 172.16.0.202?
Answer: C. C. 32445
Routers use the longest prefix match rule to select the most specific route for a destination. The IP address falls within the slash 25 subnet, which has a metric of 32445. The slash 29 subnet does not cover this address.
Q14. Refer to the exhibit. An administrator is tasked with configuring a voice VLAN. What is the expected outcome when a Cisco phone is connected to the GigabitEthernet 3/1/4 port on a switch?
Answer: B. B. The phone sends and receives data in VLAN 50, but a workstation connected to the phone sends and receives data in VLAN 1.
The voice VLAN command instructs the IP phone to tag its voice traffic in VLAN 50. Data traffic from a connected workstation remains untagged and lands in the native access VLAN. The phone and PC do not share the same VLAN.
Q15. Refer to the exhibit. The show ip ospf interface command has been executed on R1. How is OSPF configured?
Answer: C. C. The default Hello and Dead timers are in use.
OSPF relies on matching hello and dead timers to form neighbor adjacencies. The exhibit displays the default broadcast network timer values of 10 and 40 seconds. Incorrect options misinterpret the network type or neighbor count.
Q16. Refer to the exhibit. A network engineer is verifying the settings on a new OSPF network. All OSPF configurations use the default values unless otherwise indicated. Which router does the engineer expect will be elected as the DR when all d…
Answer: D. D. R4
OSPF designates a router based on the highest interface priority on the broadcast segment. Because R4 has a priority of 204, which is higher than all other routers, it wins the election regardless of router ID.
Q17. Refer to the exhibit. Which route must be configured on R1 so that OSPF routing is used when OSPF is up, but the server is still reachable when OSPF goes down?
Answer: D. D. ip route 10.1.1.10 255.255.255.255 172.16.2.2 125
A floating static route uses an administrative distance higher than the dynamic routing protocol to act as a backup. Because the distance of 125 is higher than the OSPF default of 110, the static route only installs if OSPF fails.
Q18. Refer to the exhibit. Site A was recently connected to site B over a new single-mode fiber path. Users at site A report intermittent connectivity issues with applications hosted at site B. What is the reason for the problem?
Answer: D. D. An incorrect type of transceiver has been inserted into a device on the link
Single-mode fiber spanning long distances requires compatible long-range optics on both ends. Because the site uses a short-range transceiver instead of a long-range one, the physical layer mismatch causes intermittent connectivity over the seven kilometer link.
Q19. Refer to the exhibit. An engineer is checking the routing table in the main router to identify the path to a server on the network. Which route does the router use to reach the server at 192.168.2.2?
Answer: B. B. S 192.168.2.0/29 [1/0] via 10.1.1.1
The longest-prefix match rule dictates that the router chooses the most specific subnet in its routing table. Because the slash twenty-nine route covers the exact host range, it is preferred over the broader slash twenty-eight or slash twenty options.
Q20. Refer to the exhibit. What is the next hop address for traffic that is destined to host 10.0.1.5?
Answer: D. D. 10.0.1.50
The longest-prefix match rule dictates that the router chooses the most specific subnet available. Because a slash thirty-two host route is the most specific match possible, the router forwards traffic to its designated next hop.
Q21. Refer to the exhibit. Which type of JSON data is shown?
Answer: D. D. object
Curly braces in JSON syntax denote an object that contains key-value pairs. Because the structure starts and ends with these braces, it forms an object rather than an array or a standalone boolean value.
Q22. Refer to the exhibit. Switch | Priority | MAC Address —|—|— SW1 | 12288 | 00:10:a1:95:2b:77 SW2 | 28672 | 00:10:a1:82:03:94 SW3 | 28672 | 00:10:a1:51:57:51 SW4 | 12288 | 00:10:a1:03:42:e8 Which switch becomes the root bridge?
Answer: D. D. SW4 – Bridge Priority – 12288 – mac-address 00:10:a1:03:42:e8
Spanning Tree Protocol elects the root bridge based on the lowest bridge ID, which combines priority and MAC address. SW4 wins because its MAC address is lower than SW1's when breaking the priority tie.
Q23. Refer to the exhibit. The IPv6 address for the LAN segment on router R2 must be configured using the EUI-64 format. When configured, which IPv6 address is produced by the router?
Answer: D. D. 2001:db8:d955:1008:10D8:BAFF:FEC2:1
EUI-64 creates an interface identifier by inserting FFFE into the middle of the MAC address and flipping the universal local bit. This process transforms the MAC into the correct extended identifier for the IPv6 prefix.
More CCNA 2026 drills and other practice exams are on @CertPunch. New rounds drop every few days at certpunch.com.