Practice for the CCNA exam with 23 exam-style practice questions, instant answer reveals, and concise explanations of every correct answer. Topics include: Refer to the exhibit. Which switch becomes the root bridge?. Follow @CertPunch and visit certpunch.com for more certification practice exams and study content.
Prefer hands-on? Take this round as an interactive practice test — answer every question, get instant feedback, and see your score: Start the CCNA 2026 practice test →
What you will practice
- Refer to the exhibit. Which action must be taken to ensure that router A is elected as the DR on the 192.168…
- Refer to the exhibit. All traffic enters the CPE router from interface Serial0/3 with an IP address of 192.16…
- Refer to the exhibit. Assuming all switches use the default STP bridge priority, which switch will be elected…
- Refer to the exhibit. All interfaces are in the same VLAN. All switches are configured with the default STP p…
- Refer to the exhibit. An architect is managing a wireless network with APs from several branch offices connec…
- Refer to the exhibit. What is the subnet mask for route 172.16.4.0?
Answers and explanations
Tap a question to expand the answer and the exam reasoning. Try to commit to your own pick first.
Q1. Refer to the exhibit. Which action must be taken to ensure that router A is elected as the DR on the 192.168.2.0/24 segment?
Answer: A. A. Configure router A's interface on that segment with the highest OSPF priority value.
OSPF Designated Router election is decided by the highest interface priority value, defaulting to a tiebreaker of the highest router ID. Setting the priority to the lowest value or merely setting the router ID does not guarantee winning the election.
Q2. Refer to the exhibit. All traffic enters the CPE router from interface Serial0/3 with an IP address of 192.168.50.1. Web traffic from the WAN is destined for a LAN network where servers are load-balanced. An IP packet with a destination ad…
Answer: D. D. 192.168.1.224/27 via 192.168.15.5
Routers evaluate destination IP addresses using the longest prefix match rule to find the most specific valid route. A slash 27 subnet provides a longer prefix match than a slash 26, ensuring the router selects the most precise network path.
Q3. Refer to the exhibit. Assuming all switches use the default STP bridge priority, which switch will be elected as the root bridge? SW1: 0C:E0:38:41:86:07 SW2: 0C:0E:15:22:05:97 SW3: 0C:0E:15:1A:3C:9D SW4: 0C:E0:18:A1:B3:19
Answer: C. C. SW3
Spanning Tree Protocol elects the root bridge based on the lowest Bridge ID. When priorities are tied, the switch with the lowest MAC address becomes the root, and hexadecimal values must be compared byte by byte to find the winner.
Q4. Refer to the exhibit. All interfaces are in the same VLAN. All switches are configured with the default STP priorities. During the STP elections, which switch becomes the root bridge?
Answer: D. D. MDF-DC-3: 08:0E:18:1A:3C:9D
With default Spanning Tree priorities, the lowest MAC address determines the root bridge. The switch with the lowest hexadecimal MAC address wins the election, bypassing other switches with higher byte values.
Q5. Refer to the exhibit. An architect is managing a wireless network with APs from several branch offices connecting to the WLC in the data center. There is a new requirement for a single WLAN to process the client data traffic without sendin…
Answer: B. B. Enable FlexConnect Local Switching.
FlexConnect local switching allows remote access points to bridge client data traffic directly onto the local branch network instead of tunneling it back to the central controller. The other profiling and disassociation options are distractors that do not alter the traffic forwarding path.
Q6. Refer to the exhibit. What is the subnet mask for route 172.16.4.0?
Answer: C. C. 255.255.248.0
A slash 21 prefix corresponds to the subnet mask 255.255.248.0. The other options represent different prefix lengths, so align the mask bits carefully to eliminate them.
Q7. Refer to the exhibit. Which type of JSON data is represented?
Answer: B. B. array
Square brackets in JSON denote an array, which is an ordered list of values. Curly braces would indicate an object, so rely on the enclosure type to identify the data structure correctly.
Q8. Refer to the exhibit. Router-WAN1 has a new connection via Gi0/0 to the ISP. Users running the web applications indicate that connectivity is unstable to the internet. What is causing the interface issue?
Answer: B. B. A duplex mismatch is causing frame errors and collisions.
Simultaneous collisions and CRC errors on a full-duplex link definitively point to a duplex mismatch with the ISP. Broadcast storms cause high utilization, and while runts are small frames, they do not explain the collision counter increasing on an interface.
Q9. Refer to the exhibit. PC A is communicating with another device at IP address 10.225.34.225. Through which router does router Y route the traffic?
Answer: C. C. router C
Router Y forwards traffic using the longest-prefix match rule, which prioritizes the most specific subnet in the routing table. Even if other routes exist, the /15 prefix provides the most precise match for the destination, sending traffic to router C.
Q10. Refer to the exhibit. How does router R1 handle traffic to 192.168.10.16?
Answer: B. B. It selects the RIP route because it has the longest prefix inclusive of the destination address
Routers always select the route with the longest matching prefix, regardless of the protocol's administrative distance. Even though EIGRP has a better default distance, the RIP route provides a more specific /27 subnet match for the destination.
Q11. Refer to the exhibit. For the connection from inside local host 10.4.4.5 to 172.23.103.10:80, which IP address is the source IP after NAT has taken place?
Answer: D. D. 172.23.104.4
Network Address Translation replaces the inside local source IP with the configured inside global address before packets exit. The translated source becomes 172.23.104.4, because the other addresses represent either the original host or the destination server.
Q12. Refer to the exhibit. A network engineer must configure NETCONF. After creating the configuration, the engineer gets output from the command show line but not from show running-config. Which command completes the configuration?
Answer: D. D. Device(config)# netconf-yang
The global configuration command netconf-yang is the required command to enable the NETCONF protocol and bring port 830 up on a Cisco device. The other options are auxiliary parameters that only function after the main protocol has been successfully enabled.
Q13. Refer to the exhibit. Host A sends a unicast frame destined for host D, and the switch does not yet have host D's MAC address in its MAC address table. What does the switch do when it receives the frame from host A?
Answer: A. A. It floods the frame out of all ports except port Fa0/1
When a switch receives a frame with an unknown destination MAC, it treats it as an unknown unicast and floods it out all active ports in the same VLAN except the receiving port. Broadcast storms and err-disable states require physical loops or violated security policies.
Q14. Refer to the exhibit. A network engineer must configure the WLC to allow only DHCP and DNS packets for User1 and User2. Which configuration must be used?
Answer: C. C. Enable Web policy and Authentication in the Layer 3 Security configuration.
Configuring a local web policy under Layer 3 security places wireless clients in a web authentication state, limiting their traffic to DHCP and DNS. Standard 802.1X operates at Layer 2, and fallback policies with MAC filtering do not restrict initial traffic.
Q15. Refer to the exhibit. Which type of route does R1 use to reach host 10.10.13.10/32?
Answer: B. B. network route
Cisco routers use the longest prefix match rule to select the most specific routing table entry for a destination IP address. A /25 network route is more specific than a /24 default route, and a host route would require a /32 mask.
Q16. Refer to the exhibit. Which configuration establishes a Layer 2 LACP EtherChannel when applied to both switches?
Answer: A. interface range g1/1 – 3
The command channel-group mode active forces a local interface to actively negotiate a Layer 2 EtherChannel using the LACP protocol. Setting the mode to passive fails if both sides wait, while mode on creates a static channel without protocol negotiation.
Q17. Refer to the exhibit. Which command must be executed for Gi1/1 on SW1 to passively become a trunk port if Gi1/1 on SW2 is configured in desirable or trunk mode?
Answer: A. A. switchport mode dynamic auto
The command switchport mode dynamic auto configures the interface to passively listen for Dynamic Trunking Protocol requests and form a trunk. Dynamic desirable actively attempts to form a trunk, which violates the passive requirement.
Q18. Refer to the exhibit. Only four switches are participating in the VLAN spanning-tree process. Branch-1: priority 61440 Branch-2: priority 32768 Branch-3: priority 0 Branch-4: priority 24576. Which switch becomes the permanent root bridge f…
Answer: C. C. Branch-3
Spanning Tree Protocol elects the root bridge based on the lowest bridge ID, which combines the priority value and the MAC address. Branch-3 has a priority of zero, making it the lowest possible priority value and guaranteeing it wins the root bridge election.
Q19. Refer to the exhibit. An engineer is building a new Layer 2 LACP EtherChannel between SW1 and SW2, and they executed the given show commands to verify the work. Which additional task must be performed so that the switches successfully bund…
Answer: D. D. Configure the switchport trunk allowed vlan add 300 command on interface Fa0/2 on SW1.
All physical interfaces in a Layer 2 EtherChannel must have identical configurations, including allowed VLANs. Because SW1 interface Fa0/2 is missing VLAN 300 from its allowed list, adding VLAN 300 resolves the mismatch and allows the port to bundle.
Q20. What is represented by the word "VPN11" within this JSON schema?
Answer: D. D. value
In JSON syntax, a key-value pair assigns a specific value to a key, with the value appearing to the right of the colon. In the pair where VPN concentrator is the key, the string VPN11 represents the assigned value.
More CCNA 2026 drills and other practice exams are on @CertPunch. New rounds drop every few days at certpunch.com.