Practice for the CCNA exam with 23 exam-style practice questions, instant answer reveals, and concise explanations of every correct answer. Topics include: Which state does the switch port move to when PortFast is enabled?. Follow @CertPunch and visit certpunch.com for more certification practice exams and study content.
Prefer hands-on? Take this round as an interactive practice test — answer every question, get instant feedback, and see your score: Start the CCNA 2026 practice test →
What you will practice
- Which state does the switch port move to when PortFast is enabled?
- A corporate office uses four floors in a building. Floor 1 has 24 users. Floor 2 has 29 users. Floor 3 has 28…
- Which IPv6 address block sends packets to a group address rather than a single address?
- A network administrator is setting up a new IPv6 network using the 64-bit address 2001:0EB8:00C1:2200:0001:00…
- An engineer is configuring data and voice services to pass through the same port. The designated switch inter…
- Which interface is used for out-of-band management on a WLC?
Answers and explanations
Tap a question to expand the answer and the exam reasoning. Try to commit to your own pick first.
Q1. Which state does the switch port move to when PortFast is enabled?
Answer: D. forwarding
Enabling PortFast causes an access port to bypass the listening and learning states and transition immediately to forwarding. This prevents initial delay issues for end devices requesting addresses.
Q2. A corporate office uses four floors in a building. Floor 1 has 24 users. Floor 2 has 29 users. Floor 3 has 28 users. Floor 4 has 22 users. Which subnet summarizes and gives the most efficient distribution of IP addresses for the router con…
Answer: C. 192.168.0.0/25 as summary and 192.168.0.0/27 for each floor
A slash twenty-seven subnet provides thirty usable addresses, which supports the largest floor without waste. Four of these subnets combine efficiently into a single slash twenty-five summary route.
Q3. Which IPv6 address block sends packets to a group address rather than a single address?
Answer: D. FF00::/8
FF00::/8 defines IPv6 multicast addresses, which deliver packets to a group of interfaces that have joined the multicast group. The other options represent global unicast, unique local, and link-local addresses, which are used for standard one-to-one communication.
Q4. A network administrator is setting up a new IPv6 network using the 64-bit address 2001:0EB8:00C1:2200:0001:0000:0000:0331/64. To simplify the configuration, the administrator has decided to compress the address. Which IP address must the a…
Answer: D. ipv6 address 2001:EB8:C1:2200:1::331/64
IPv6 address compression removes leading zeros within each 16-bit hextet. You can also replace one contiguous block of zeroes with a double colon to get the shortest valid representation.
Q5. An engineer is configuring data and voice services to pass through the same port. The designated switch interface fastethernet0/1 must transmit packets using the same priority for data when they are received from the access port of the IP…
Answer: D. switchport priority extend trust
The switchport priority extend trust command instructs the switch to trust the CoS value of traffic received from the access port of the IP phone. Other options rewrite the priority to a fixed value or apply to voice VLAN tagging.
Q6. Which interface is used for out-of-band management on a WLC?
Answer: D. service port
The service port is a dedicated out-of-band management interface on a Cisco Wireless LAN Controller. It provides a separate path for administrative tasks independent of production traffic, whereas the management interface handles in-band communication.
Q7. Which interface or port on the WLC is the default for in-band device administration and communications between the controller and access points?
Answer: B. management interface
The management interface is the default in-band interface used for device administration and CAPWAP control traffic between the controller and access points. The service port is reserved for out-of-band management, making it incorrect here.
Q8. Which type of network attack overwhelms the target server by sending multiple packets to a port until the half-open TCP resources of the target are exhausted?
Answer: A. SYN flood
A SYN flood attack exploits the TCP three-way handshake by sending SYN requests without completing the connection. The term half-open TCP resources is the key exam cue that eliminates reflection and amplification attacks.
Q9. How does QoS optimize voice traffic?
Answer: B. by reducing packet loss
Quality of service optimizes voice traffic by prioritizing packets to reduce packet loss, latency, and jitter. While it does differentiate traffic types, the direct optimization goal for voice is minimizing dropped packets.
Q10. What is a function of a Next-Generation IPS?
Answer: A. correlates user activity with network events
A Next Generation Intrusion Prevention System provides contextual awareness by correlating network events with user identity. Options involving MAC forwarding or RADIUS enforcement describe switches or authentication servers, not IPS features.
Q11. Which of the following is a classic distance vector routing protocol?
Answer: E. RIP
Routing Information Protocol, or RIP, is a classic distance vector protocol. EIGRP is often called an advanced distance vector protocol, while OSPF and IS-IS are link-state protocols, eliminating those choices.
Q12. Which statement identifies the functionality of virtual machines?
Answer: B. The hypervisor can virtualize physical components including CPU, memory, and storage
A hypervisor provides virtualization by abstracting physical hardware components including CPU, memory, and storage. A single hypervisor supports multiple virtual machines, eliminating the option claiming it supports only one virtual machine.
Q13. An office has 8 floors with approximately 30-40 users per floor. One subnet must be used. Which command must be configured on the router Switched Virtual Interface to use address space efficiently?
Answer: B. ip address 192.168.0.1 255.255.254.0
A 23-bit subnet mask provides 510 usable host addresses, efficiently covering the roughly 320 users while avoiding excessive waste. Because this is configured on a Switched Virtual Interface, it must use a valid host IP address rather than the network identifier.
Q14. The address block 192.168.32.0/24 must be subnetted into smaller networks. The engineer must meet these requirements: – Create 8 new subnets. – Each subnet must accommodate 30 hosts. – VLAN 10 must use the last usable IP address in the fir…
Answer: C. ip address 192.168.32.30 255.255.255.224
Borrowing three bits creates a 27-bit mask, yielding exactly eight subnets with thirty usable hosts each. The first subnet ranges from zero to thirty-one, making thirty the last valid assignable host address for that interface.
Q15. Which standard is required when more than one distribution system port and only one IP address are configured for a Cisco WLC?
Answer: A. 802.3ad
The 802.3ad standard defines Link Aggregation, allowing multiple physical interfaces to bundle into one logical interface. When a wireless LAN controller uses multiple ports with a single IP address, LAG must be enabled so they act as one logical path.
Q16. The service password-encryption command is entered on a router. What is the effect of this configuration?
Answer: A. restricts unauthorized users from viewing clear-text passwords in the running configuration
The service password-encryption command encrypts plaintext passwords, such as line passwords, within the running configuration to restrict casual viewing. The encryption uses a weak Type 7 algorithm, but it prevents unauthorized users from easily reading stored credentials.
Q17. What is the purpose of configuring different levels of syslog for different devices on the network?
Answer: A. to set the severity of syslog messages from each device
Configuring different syslog levels on network devices allows administrators to set the severity of messages each device generates and sends. This helps prioritize alerts and manage monitoring effectively. The other options describe unrelated syslog features like rate-limiting or message identification.
Q18. What is an appropriate use for private IPv4 addressing?
Answer: D. on hosts that communicate only with other internal hosts
Private IPv4 addressing is designed for internal hosts that communicate only with other internal hosts. The public-facing and external streaming options fail because RFC 1918 addresses are not routable across the Internet.
Q19. Which command can be used to view system log messages related to EIGRP for IPv6 troubleshooting?
Answer: D. show logging
The show logging command displays buffered system log messages, which frequently include routing protocol events and errors. The other choices only display current protocol states, such as neighbor adjacencies, rather than historical system logs.
Q20. What is the difference between IPv6 unicast and anycast addressing?
Answer: A. An individual IPv6 unicast address is supported on a single interface on one node, but an IPv6 anycast address is assigned to a group of interfaces on multiple nodes.
An IPv6 unicast address uniquely identifies a single interface on one node, whereas an anycast address is assigned to multiple interfaces, typically on different nodes. The routing protocol directs traffic to the nearest node, making it distinct from one-to-one unicast delivery.
Q21. A network administrator must enable DHCP services between two sites. What must be configured for the router to pass DHCPDISCOVER messages on to the server?
Answer: B. a DHCP Relay Agent
A DHCP relay agent forwards broadcast DHCPDISCOVER messages from clients to a server on a different subnet. Because routers block broadcast traffic by default, configuring an IP helper address is required to forward these messages as unicast across the network boundary.
Q22. Which spanning-tree enhancement avoids the learning and listening states and immediately places ports in the forwarding state?
Answer: B. PortFast
PortFast is a Spanning Tree Protocol enhancement configured on access ports to bypass the listening and learning states. This allows end devices to access the network immediately without waiting for the standard convergence timer to expire.
Q23. What occurs to frames during the process of frame flooding?
Answer: C. Frames are sent to every port on the switch in the same VLAN except from the originating port.
When a switch floods frames for unknown unicast or broadcast traffic, it forwards them out every port within the same VLAN except the receiving port. This action confines traffic to its assigned broadcast domain and prevents network loops.
More CCNA 2026 drills and other practice exams are on @CertPunch. New rounds drop every few days at certpunch.com.