Practice for the CCNA exam with 23 exam-style practice questions, instant answer reveals, and concise explanations of every correct answer. Topics include: Refer to the exhibit. Which switch in this configuration will be elected as the root bridge? SW1 0C:E4:85:71:03:80 – SW2. Follow @CertPunch and visit certpunch.com for more certification practice exams and study content.
Prefer hands-on? Take this round as an interactive practice test — answer every question, get instant feedback, and see your score: Start the CCNA 2026 practice test →
What you will practice
- Refer to the exhibit. Which switch in this configuration will be elected as the root bridge? SW1 0C:E4:85:71…
- Refer to the exhibit. Users on existing VLAN 100 can reach sites on the Internet. Which action must the admin…
- A technician receives a report of network slowness and the issue has been isolated to the interface FastEther…
- Refer to the exhibit. Which format matches the Modified EUI-64 IPv6 interface address for the network 2001:db…
- Refer to the exhibit. With which metric was the route to host 172.16.0.202 learned?
- Refer to the exhibit. Which switch in this configuration will be elected as the root bridge? SW1 0C:B4:86:22…
Answers and explanations
Tap a question to expand the answer and the exam reasoning. Try to commit to your own pick first.
Q1. Refer to the exhibit. Which switch in this configuration will be elected as the root bridge? SW1 0C:E4:85:71:03:80 – SW2 0C:0E:1A:22:05:97 – SW3 0C:E0:A1:1A:3C:9D – SW4 0C:00:18:A1:B3:19
Answer: B. B. SW2
Spanning Tree Protocol elects the root bridge based on the lowest bridge ID, which combines priority and MAC address. SW2 wins this election because it has the lowest configured priority value of 4096.
Q2. Refer to the exhibit. Users on existing VLAN 100 can reach sites on the Internet. Which action must the administrator take to establish connectivity to the Internet for users in VLAN 200?
Answer: D. D. Update the NAT_INSIDE_RANGES ACL.
Port Address Translation uses an access control list to define which internal subnets are translated. Because the existing list only permits VLAN 100, the administrator must update it to include the VLAN 200 subnet.
Q3. A technician receives a report of network slowness and the issue has been isolated to the interface FastEthernet0/13. What is the root cause of the issue?
Answer: C. C. physical errors
A high number of CRC errors indicates a physical layer problem, such as faulty cabling or electromagnetic interference. These Layer 1 issues corrupt frames and force retransmissions, directly causing network slowness.
Q4. Refer to the exhibit. Which format matches the Modified EUI-64 IPv6 interface address for the network 2001:db8::/64?
Answer: D. D. 2001:db8::5200:00ff:fe04:0000/64
Modified EUI-64 creates an interface identifier by inserting FFFE into the MAC address and flipping the seventh bit. This bit inversion changes the first octet from 50 to 52, resulting in the correct IPv6 address.
Q5. Refer to the exhibit. With which metric was the route to host 172.16.0.202 learned?
Answer: C. C. 38443
The destination address falls within the 172.16.0.128/25 subnet, which matches the OSPF route. In a Cisco routing table, the second number inside the brackets represents the route metric, which is 38443.
Q6. Refer to the exhibit. Which switch in this configuration will be elected as the root bridge? SW1 0C:B4:86:22:42:37 – SW2 0C:0B:15:22:05:97 – SW3 0C:0B:15:1A:3C:9D – SW4 0C:B0:18:A1:B3:19
Answer: C. C. SW3
Spanning Tree Protocol uses the lowest bridge ID to elect the root bridge. If priorities tie, the lowest MAC address becomes the tiebreaker, allowing SW3 to win the election over SW4.
Q7. Refer to the exhibit. What does route 10.0.1.3/32 represent in the routing table?
Answer: B. B. a single destination address
A 32 subnet mask indicates a host route that represents exactly one specific IP address. This differs from broader subnet masks which represent entire network segments or ranges of addresses.
Q8. Refer to the exhibit. The network administrator must prevent the switch Cat9K-2 IP address from being visible in LLDP without disabling the protocol. Which action must be taken to complete the task?
Answer: D. D. Configure the no lldp tlv-select management-address command globally on Cat9K-2.
The management IP address is carried in the management-address TLV within LLDP. Using the no lldp tlv-select management-address command globally on Cat9K-2 suppresses the advertisement of the IP address while keeping LLDP operational.
Q9. Refer to the exhibit. What must be configured to enable 802.11w on the WLAN?
Answer: C. C. Set PMF to Required.
802.11w is implemented through Protected Management Frames, also known as PMF. Setting PMF to Required enforces management frame protection, which directly satisfies the requirement for enabling 802.11w.
Q10. What is represented by the word "fe5/42" within this JSON schema?
Answer: C. C. value
In JSON syntax, values appear to the right of a colon in a key value pair. In the entry port colon fe5/42, the string fe5-4-2 is the value associated with the key named port.
Q11. Refer to the exhibit. Which feature is enabled by this configuration?
Answer: C. C. a dynamic NAT address pool
The command defines a range of global IP addresses for translation. This creates a dynamic Network Address Translation pool, distinguishing it from static NAT or Port Address Translation configurations.
Q12. Refer to the exhibit. R1 has just received a packet from host A that is destined to host B. Which route in the routing table is used by R1 to reach host B?
Answer: B. B. 10.10.13.0/25 [108/0] via 10.10.10.10
When multiple routes point to the same destination prefix, the router selects the route with the lowest administrative distance. A configured administrative distance of 108 beats Open Shortest Path First at 110.
Q13. Which interface is used to send traffic to the destination network?
Answer: C. C. F0/12
Routers first compare administrative distance and prefer Enhanced Interior Gateway Routing Protocol routes over Routing Information Protocol. Between equal protocol routes, the lower metric wins, making the route via F0/12 the preferred path.
Q14. Refer to the exhibit. Based on the interface counters shown, which condition is least likely to be present on this interface?
Answer: D. D. duplex mismatch
A duplex mismatch typically generates collisions, late collisions, and CRC errors. An interface operating in full-duplex with zero collisions makes this condition highly unlikely.
Q15. Refer to the exhibit. After applying this configuration to router R1, a network engineer is verifying the implementation. If all links are operating normally, and the engineer sends a series of packets from PC1 to PC3, how are the packets…
Answer: D. D. They are routed to 172.16.20.2
The router installs the default route with the lowest administrative distance into the routing table. Because the primary route via 172.16.20.2 has a lower distance than the backup route, all traffic matches and uses this default path.
Q16. Refer to the exhibit. Which next-hop IP address does Router1 use for packets destined to host 10.10.13.158?
Answer: A. A. 10.10.10.9
Router forwarding decisions rely on the longest-prefix match rule to select the best path. Because the slash twenty-eight subnet includes the destination host and is more specific than broader routes, the router selects its next hop.
Q17. Refer to the exhibit. Marketing-SW1 MAC Address Table: VLAN | MAC Address | Port 101 | AAAA.AAAA.AA01 | Gi1/0 (PC-1) 101 | AAAA.AAAA.AA02 | Gi1/2 (PC-2) 101 | AAAA.AAAA.AA03 | Gi1/3 (PC-3) PC-4 is connected to interface Gi1/4. What does th…
Answer: C. C. It adds PC-4's source MAC address to the table and forwards the frame only out the port toward PC-1.
Switches learn source MAC addresses upon receiving a frame and check the table for the destination. Because the destination MAC is already known, the switch performs a direct unicast forward instead of flooding the frame.
Q18. Refer to the exhibit. Which configuration enables DHCP addressing for hosts connected to interface FastEthernet0/1 on router R3?
Answer: D. D. interface FastEthernet0/1 ip helper-address 10.0.1.1 ! access-list 100 permit udp host 10.0.1.1 eq bootps host 10.148.2.1
A router needs an IP helper address to forward local DHCP broadcasts to a remote server. Returning DHCP traffic is permitted using UDP port 67, known as bootps, which must be explicitly allowed by any inbound access lists.
Q19. Refer to the exhibit. Router R1 must be configured to reach the 10.0.3.0/24 network from the 10.0.1.0/24 segment. Which command must be used to configure the route?
Answer: D. D. ip route 10.0.3.0 255.255.255.0 10.0.4.3
Cisco IOS requires a destination network, subnet mask, and next hop address for static routing. Wildcard masks are used in routing protocols and access lists, while route add is a host operating system command rather than a router command.
Q20. Refer to the exhibit. An engineer is bringing up a new circuit to the MPLS provider on the Gi0/1 interface of Router 1. The new circuit uses eBGP and learns the route to VLAN25 from the BGP path. What is the expected behavior for the traff…
Answer: C. C. Traffic to 10.10.13.0/25 is forwarded out Gi0/1 after the eBGP-learned route replaces the OSPF route in the routing table.
Cisco IOS prefers the route with the lowest administrative distance when learning the same prefix from multiple sources. Because external BGP has an administrative distance of 20, it replaces the OSPF route, which has a higher distance of 110.
Q21. Refer to the exhibit. What is the next step to complete the implementation for the partial NAT configuration shown?
Answer: D. D. Configure the NAT outside interface.
Network Address Translation requires both an inside and outside interface assignment to function. The trap is picking options that modify the ACL or pool, but the statistics clearly show the outside interface is completely missing.
Q22. Refer to the exhibit. Which command provides this output?
Answer: B. B. show cdp neighbor
The Cisco Discovery Protocol reveals directly connected neighbors using fields like capability codes, platform, and port ID. Other show commands focus on routing tables or interface statistics rather than neighbor discovery details.
Q23. Refer to the exhibit. Which statement about the interface that generated the output is true?
Answer: A. A. A syslog message is generated when a violation occurs.
Port security violation mode determines the action taken when a violation occurs. In shutdown mode, the interface is placed into an error-disabled state and generates a syslog message, making it the most restrictive option.
More CCNA 2026 drills and other practice exams are on @CertPunch. New rounds drop every few days at certpunch.com.