Practice for the CCNA exam with 22 exam-style practice questions, instant answer reveals, and concise explanations of every correct answer. Topics include: Refer to the exhibit. A network engineer must configure R1 so that it sends all packets destined to the 10.0.0.0/24 netw. Follow @CertPunch and visit certpunch.com for more certification practice exams and study content.
Prefer hands-on? Take this round as an interactive practice test — answer every question, get instant feedback, and see your score: Start the CCNA 2026 practice test →
What you will practice
- Refer to the exhibit. A network engineer must configure R1 so that it sends all packets destined to the 10.0…
- Refer to the exhibit. What is preventing host A from reaching the internet?
- What is represented by the word "port" within this JSON schema?
- Refer to the exhibit. An engineer built a new L2 LACP EtherChannel between SW1 and SW2 and executed these sho…
- Refer to the exhibit. What is represented in line 4 within this JSON schema?
- Refer to the exhibit. Shortly after SiteA was connected to SiteB over a new single-mode fiber path, users at…
Answers and explanations
Tap a question to expand the answer and the exam reasoning. Try to commit to your own pick first.
Q1. Refer to the exhibit. A network engineer must configure R1 so that it sends all packets destined to the 10.0.0.0/24 network to R3, and all packets destined to PC1 to R2. Which configuration must the engineer implement?
Answer: C. R1(config)#ip route 10.0.0.5 255.255.255.255 172.16.0.2
Creating a host-specific route with a /32 mask ensures traffic for that single device follows a dedicated path. This longest prefix match overrides the broader /24 network route, directing traffic correctly while remaining options use incorrect masks or next hops.
Q2. Refer to the exhibit. What is preventing host A from reaching the internet?
Answer: B. B. The DNS server IP address is incorrectly configured
Internet browsing fails when the configured domain name system server address does not match the actual server. The host still has valid routing and a correct default gateway, but name resolution failures prevent translating web addresses into reachable IP addresses.
Q3. What is represented by the word "port" within this JSON schema?
Answer: C. C. key
In JSON syntax, a key is the string identifier that appears before the colon in a key-value pair. In an entry like "port": "te8/30", the word port acts as the key labeling its associated value.
Q4. Refer to the exhibit. An engineer built a new L2 LACP EtherChannel between SW1 and SW2 and executed these show commands to verify the work. Which action establishes an LACP port channel?
Answer: B. B. Change the channel-group mode on SW1 to active or passive
Link Aggregation Control Protocol requires at least one side to actively negotiate. Changing the static on mode to an LACP mode like active ensures both switches successfully negotiate and form the port channel.
Q5. Refer to the exhibit. What is represented in line 4 within this JSON schema?
Answer: A. A. object
In JSON, curly braces denote an object containing key value pairs. Arrays use square brackets, making the object structure the only correct choice for this specific syntax.
Q6. Refer to the exhibit. Shortly after SiteA was connected to SiteB over a new single-mode fiber path, users at SiteA report intermittent connectivity issues when accessing applications at SiteB. Based on the interface output, what is the mos…
Answer: A. A. The SiteA interface is experiencing a physical-layer or interface reliability issue.
The SiteA interface shows degraded reliability at 166 out of 255. Decreased reliability indicates physical layer or data link errors like CRCs, which directly cause intermittent connectivity despite the interface being up.
Q7. SW1 supports connectivity for a lobby conference room and must be secured. The engineer must limit the connectivity from PC1 to the SW1 and SW2 network. The MAC addresses allowed must be limited to two. Which configuration secures the conf…
Answer: A. A. interface gi1/0/15 switchport port-security switchport port-security maximum 2
Enabling port security and setting a maximum of two addresses restricts Layer two access on a switch port. The maximum keyword directly fulfills the requirement to limit learned addresses, whereas the other options lack this restriction.
Q8. Refer to the exhibit. A public IPv6 address must be configured for internet access. Which command must be configured on the R2 WAN interface to the service provider?
Answer: C. C. ipv6 address 2001:db8:123:45::4/64
A WAN interface facing an internet service provider requires a routable global unicast IPv6 address. The other options are invalid because link-local addresses are non-routable and anycast addresses serve specific load-balancing roles, not standard internet access.
Q9. Refer to the exhibit. A packet is being sent across router R1 to host 172.16.0.14. What is the destination route for the packet?
Answer: D. D. 209.165.200.246 via Serial0/1/0
When a destination IP lacks a specific matching entry in the routing table, the router uses the candidate default route. Because no specific subnet exists for the host, the forwarding decision correctly relies on the gateway of last resort.
Q10. Refer to the exhibit. Packets are flowing from 192.168.10.1 to the destination at IP address 192.168.20.75. Which next hop will the router select for the packet?
Answer: B. B. 10.10.10.11
Routers determine the best path by selecting the longest prefix match in the routing table. The slash twenty-five subnet is the most specific route that covers the destination IP, overriding broader matches.
Q11. Refer to the exhibit. An engineer configured the New York router with static routes that point to the Atlanta and Washington sites. Which command must be configured on the Atlanta and Washington routers so that both sites are able to reach…
Answer: A. A. ipv6 route::/0 Serial 0/0/0
Branch routers require a return path to reach central hub networks, typically provided by an IPv6 default route. The other options fail because they either use incorrect IPv4 syntax or provide incomplete routing instructions.
Q12. Refer to the exhibit. Which prefix does Router1 use for traffic to Host A?
Answer: D. D. 10.10.13.208/29
The routing table uses the longest prefix match rule to select the most specific route for a destination. The slash twenty-nine subnet provides the tightest boundary that includes the target IP address.
Q13. Refer to the exhibit. Which action must be taken so that neighboring devices rapidly discover switch Cat9300?
Answer: B. B. Configure the cdp timer 10 command on switch Cat9300.
The CDP timer controls the interval at which a device broadcasts its discovery advertisements. Lowering the hold time would only expire neighbors faster, and configuring neighbors is outside the local switch scope.
Q14. Refer to the exhibit. How will the router handle a packet destined for 192.0.2.156?
Answer: C. C. The router will forward the packet via Serial2.
When an IP address does not match a specific route, the router forwards the packet using the default route. The default gateway points to a directly connected interface, dictating the exact outbound link.
Q15. Refer to the exhibit. How must router A be configured so that it only sends Cisco Discovery Protocol information to router C?
Answer: B. B. #config t Router A (config)#cdp run – Router A (config)#interface gi0/0/0 Router A (config-if)#no cdp enable
Cisco Discovery Protocol operates globally but can be disabled per interface using no cdp enable. Disabling it on the interface toward Router B ensures advertisements are only sent to Router C, meeting the requirement.
Q16. Refer to the exhibit. Routers R1 and R2 have been configured with their respective LAN interfaces. The two circuits are operational and reachable across the WAN. Which command set establishes failover redundancy if the primary circuit goes…
Answer: D. R2(config)#ip route 0.0.0.0 0.0.0.0 10.10.10.5 2
Floating static routes provide failover by assigning a higher administrative distance to the backup path. This keeps the secondary route hidden in the background until the primary link fails and removes its lower distance route.
Q17. Refer to the exhibit. All routers in the network are configured correctly, and the expected routes are being exchanged among the routers. Which set of routes are learned from neighbors and installed on router 2?
Answer: A. A. 10.129.9.0/23 10.139.2.0/30 10.2.191.0/30 10.129.9.0/25
Dynamic routing protocols advertise and install network routes learned from neighboring devices, while directly connected networks are inherently present in the routing table. Therefore, any local subnets must be excluded to identify the dynamically learned paths.
Q18. Refer to the exhibit. An engineer is updating the R1 configuration to connect a new server network. The PCs on the management network (10.1.1.0/24) must be prevented from pinging the default gateway of the new server network (172.16.2.10)…
Answer: B. access-list 100 deny icmp 10.1.1.0 0.0.0.255 host 172.16.2.10
Extended access lists must filter specific traffic types like ICMP and be placed close to the source. This rule blocks pings to the target host while the permit statement allows all other legitimate traffic.
Q19. Refer to the exhibit. Which switch in this configuration will be elected as the root bridge? SW1: 0C:0A:05:22:05:97 SW2: 0C:0A:A8:1A:3C:9D SW3: 0C:0A:18:81:B3:19 SW4: 0C:4A:82:56:35:78
Answer: C. C. SW3
Spanning Tree Protocol elects the root bridge based on the lowest bridge ID. When priorities are tied, the switch with the lowest MAC address wins the election. The third octet makes SW3 lower than SW2.
Q20. Refer to the exhibit. A network administrator configures an interface on a new switch so that it connects to interface Gi1/0/1 on switch Cat9300-1. Which configuration must be applied to the new interface?
Answer: A. switchport mode trunk
Both sides of a switch link must be statically configured as a trunk for the connection to operate correctly. The other options either place the port in access mode or apply unnecessary encapsulation commands on a modern switch.
Q21. Refer to the exhibit. An IPv6 address must be obtained automatically on the LAN interface on R1. Which command must be implemented to accomplish the task?
Answer: B. B. ipv6 address dhcp
The dynamic host configuration protocol assigns IPv6 addresses to client interfaces automatically. The alternate options are invalid due to typos or attempt to apply static addressing against the requirement.
Q22. What is represented by the word "R20" within this JSON schema?
Answer: A. A. value
In JSON syntax, data is structured using key-value pairs. The value appears to the right of the colon, meaning R20 represents the data assigned to the router key. Arrays require brackets and objects require braces.
More CCNA 2026 drills and other practice exams are on @CertPunch. New rounds drop every few days at certpunch.com.