Practice for the CCNA exam with 22 exam-style practice questions, instant answer reveals, and concise explanations of every correct answer. Topics include: Refer to the exhibit. A newly configured PC fails to connect to the internet by using TCP port 80 to www.cisco.com. Whic. Follow @CertPunch and visit certpunch.com for more certification practice exams and study content.
Prefer hands-on? Take this round as an interactive practice test — answer every question, get instant feedback, and see your score: Start the CCNA 2026 practice test →
What you will practice
- Refer to the exhibit. A newly configured PC fails to connect to the internet by using TCP port 80 to www.cisc…
- Refer to the exhibit. SW2 is replaced because of a hardware failure. A network engineer starts to configure S…
- Refer to the exhibit. Wireless LAN access must be set up to force all clients from the NA WLAN to authenticat…
- Refer to the exhibit. A new VLAN and switch are added to the network. A remote engineer configures OldSwitch…
- Refer to the exhibit. How does SW2 interact with other switches in this VTP domain?
- Refer to the exhibit. An engineer is configuring a new router on the network and applied this configuration…
Answers and explanations
Tap a question to expand the answer and the exam reasoning. Try to commit to your own pick first.
Q1. Refer to the exhibit. A newly configured PC fails to connect to the internet by using TCP port 80 to www.cisco.com. Which setting must be modified for the connection to work?
Answer: B. B. DNS Servers
Browsing to a web address requires DNS resolution to convert the hostname into an IP address. Since the configuration shows zeroed DNS servers, the client cannot resolve the domain, completely preventing the HTTP connection.
Q2. Refer to the exhibit. SW2 is replaced because of a hardware failure. A network engineer starts to configure SW2 by copying the fa0/1 interface configuration from SW1. Which command must be configured on the fa0/1 interface of SW2 to enable…
Answer: A. A. switchport mode trunk
Switch links carrying multiple VLANs must be explicitly configured as trunks to pass traffic. Because the existing interface defaults to dynamic auto, it waits for negotiation, so forcing trunk mode actively establishes the necessary VLAN pathway.
Q3. Refer to the exhibit. Wireless LAN access must be set up to force all clients from the NA WLAN to authenticate against the local database. The WLAN is configured for local EAP authentication. The time that users access the network must not…
Answer: C. C. Set the Lifetime (seconds) value to 0.
Wireless controller local databases use a lifetime timer to control how long credentials remain valid. Setting this value to zero removes the time restriction, ensuring users maintain uninterrupted network access without expiring.
Q4. Refer to the exhibit. A new VLAN and switch are added to the network. A remote engineer configures OldSwitch and must ensure that the configuration meets these requirements: • accommodates current configured VLANs • expands the range to in…
Answer: D. D. no switchport trunk encapsulation isl switchport trunk encapsulation dot1q switchport trunk allowed vlan add 20
IEEE standard trunking requires 802.1Q encapsulation rather than the proprietary ISL protocol. Appending VLAN 20 to the existing allowed list seamlessly expands the range while preserving current VLAN connectivity across the trunk link.
Q5. Refer to the exhibit. How does SW2 interact with other switches in this VTP domain?
Answer: D. D. It forwards only the VTP advertisements that it receives on its trunk ports.
A switch in VTP transparent mode does not process or modify its local VLAN database based on received advertisements. It simply forwards incoming VTP advertisements unchanged out its other trunk ports, acting as a relay.
Q6. Refer to the exhibit. An engineer is configuring a new router on the network and applied this configuration. Which additional configuration allows the PC to obtain its IP address from a DHCP server?
Answer: A. A. Configure the ip helper-address 172.16.2.2 command under interface Gi0/0.
A router blocks broadcast traffic by default, so a DHCP Discover message from a client cannot reach a server on a different subnet. Configuring the IP helper-address command on the receiving interface forwards these broadcasts as unicasts to the remote server.
Q7. Refer to the exhibit. Which switch becomes the root of the spanning tree? Switch 1 – BID: 32778 0018.184e.3c00 Switch 2 – BID: 24586 001a.e3ff.a680 Switch 3 – BID: 28682 0022.55cf.cc00 Switch 4 – BID: 64000 4e15.8403.08f
Answer: B. B. Switch 2
Spanning Tree Protocol selects the root bridge by identifying the switch with the lowest Bridge ID. Switch 2 has the lowest BID among the listed options, which makes it the spanning tree root.
Q8. Refer to the exhibit. After the election process, what is the root bridge in the HQ LAN? Switch 1: 0C:E0:38:81:32:58 Switch 2: 0C:0E:15:22:1A:61 Switch 3: 0C:0E:15:1D:3C:9A Switch 4: 0C:E0:19:A1:4D:16
Answer: C. C. Switch 3
Spanning Tree Protocol uses the lowest Bridge ID to elect the root bridge. Assuming default priorities, the election falls to the lowest MAC address, which belongs to Switch three.
Q9. What is represented by line 3 within this JSON schema? [ {"switch": "SW_dallas", "port": "ge16"}, {"load balancer": "LB_munich", "port": "te0/26"}, {"VPN concentrator": "VPN_toronto", "port": "ge8/15"} ]
Answer: A. A. object
Line three is enclosed in curly braces, which defines a JSON object containing multiple key-value pairs. The surrounding square brackets denote a JSON array, while the individual entries themselves are objects.
Q10. Refer to the exhibit. Why can the root bridge not be determined from the information shown?
Answer: B. B. SW3 and SW4 have the same STP priority, and no MAC addresses are provided.
The correct answer proves that Spanning Tree Protocol uses bridge priority first, then MAC address, to elect the root. The trap is that equal priorities require a tie-breaker, so without MAC addresses, the final root cannot be determined.
Q11. Refer to the exhibit. Which router or router group are NTP clients?
Answer: D. D. R1, R2, and R3
A router acts as an NTP client when it uses the ntp server command to synchronize its clock. Having the ntp master command configured does not prevent a router from also acting as a client.
Q12. Which interface is used to send traffic to the destination network? D 10.245.54.0/29 [90/9388] via G0/16 D 10.245.54.0/29 [90/50147] via G0/21 R 10.245.54.0/29 [120/15] via G0/5 R 10.245.54.0/29 [120/13] via G0/4
Answer: D. D. G0/16
The router first evaluates administrative distance to choose the preferred routing source. EIGRP internal routes have an administrative distance of 90, beating RIP, so the router then picks the lowest EIGRP metric.
Q13. Refer to the exhibit. After a recent internal security audit, the network administrator decided to block all P2P-capable devices from the selected SSID. Which configuration setting must the administrator apply?
Answer: D. D. Set the P2P Block Action to Drop.
Wireless LAN controllers use the P2P Block Action setting to manage peer-to-peer traffic. Setting it to Drop directly satisfies the audit requirement by actively blocking peer-to-peer communication on theSSID.
Q14. Refer to the exhibit. After configuring a new static route on the CPE, the engineer entered this series of commands to verify that the new configuration is operating normally. When is the static default route installed into the routing tab…
Answer: C. C. when the default route learned over external BGP becomes invalid
A floating static route remains hidden until the primary route is removed from the routing table. Because external BGP has a lower administrative distance, the static route installs only when the BGP default route becomes invalid.
Q15. Refer to the exhibit. In which structure does the word "warning" directly reside?
Answer: A. A. array
Square brackets in JSON denote an array, which holds an ordered list of values. The trap is confusing the container type with the data type, but the element directly resides inside the array structure.
Q16. Refer to the exhibit. Router R1 Fa0/0 cannot ping router R3 Fa0/1. Which action must be taken on router R1 to help resolve the configuration issue?
Answer: C. C. configure a static route with 10.10.10.2 as the next hop to reach the 20.20.20.0/24 network
Routers require valid routes to forward packets to remote subnets. Since R1 lacks a path to the 20.20.20.0 network, configuring a static route pointing to the next hop resolves the reachability failure.
Q17. Refer to the exhibit. If R1 receives a packet destined to 172.16.1.1, to which IP address does it send the packet?
Answer: A. A. 192.168.14.4
Routers forward packets using the longest prefix match rule. Because the destination is not covered by the specific 172.16.1.128 subnet, the router uses the default route to forward the packet to 192.168.14.4.
Q18. Refer to the exhibit. Router R1 is running three different routing protocols. Which route characteristic is used by the router to forward the packet that it receives for destination IP 172.16.32.1?
Answer: A. A. longest prefix
When multiple routing protocols learn routes to the same network, the router first applies the longest prefix match rule. Administrative distance is only evaluated when matching routes have identical prefix lengths.
Q19. Refer to the exhibit. When an administrator executes the show ip route command on router D to view its routing table, which value is displayed for the administrative distance for the route to network 192.168.1.0?
Answer: A. A. 110
The router installs the route with the lowest administrative distance. Because OSPF has an administrative distance of 110, it beats the external EIGRP route with an administrative distance of 170, making it the preferred source.
Q20. Refer to the exhibit. Traffic sourced from the loopback0 interface is trying to connect via SSH to the host at 10.0.1.15. What is the next hop to the destination address?
Answer: A. A. 192.168.0.7
The router forwards packets using the longest prefix match in the routing table. The destination falls within the specific 10.0.1.0/28 subnet, directing traffic to the corresponding next hop.
Q21. Refer to the exhibit. The DHCP server is configured with a DHCP pool for each of the subnets represented. Which command must be configured on switch SW1 to allow DHCP clients on VLAN 10 to receive dynamic IP addresses from the DHCP server?
Answer: C. C. SW1(config-if)#ip helper-address 192.168.20.2
A router or switch forwards broadcast packets to a specific helper address. Configuring the IP helper command on the VLAN interface relays client requests to the remote server.
Q22. Refer to the exhibit. An LACP EtherChannel between two directly connected switches is in the configuration process. Which command must be configured on switch SW2's Gi0/1-2 interfaces to establish the channel to SW1?
Answer: C. C. channel-group 1 mode active
Link Aggregation Control Protocol requires at least one side to actively negotiate. Configuring the channel group to active mode ensures the switch sends negotiation packets to form the bundle.
More CCNA 2026 drills and other practice exams are on @CertPunch. New rounds drop every few days at certpunch.com.