Practice for the CCNA exam with 24 multiple-choice questions. Answer each question before the reveal, then review the explanation to understand the reasoning.
This is Part 1/8 in the CertPunch CCNA practice exam series.
Topics covered: switching, routing, subnetting, access control lists, wireless, security fundamentals, and network troubleshooting.
More practice: certpunch.com
What you will practice
- How can you disable DTP on a switch port?
- What is the standard IP access list perform filtering?
- Which three statements about the features of SNMPv2 and SNMPv3 are true? (Choose three.)
- Which three elements must be used when you configure a router interface for VLAN trunking? (Choose three.)
- Which component of a routing table entry represents the subnet mask?
- Which technology can enable multiple VLANs to communicate with one another?
Answers and explanations
Tap a question to expand the answer and the exam reasoning. Try to commit to your own pick first.
Q1. How can you disable DTP on a switch port?
Answer: A. Configure the switch port as a trunk.
The correct answer proves that disabling DTP requires configuring the port as a static access or trunk. The trap is confusing the operational mode with the administrative mode that disables negotiation.
Q2. What is the standard IP access list perform filtering?
Answer: E. * Source IP address
The correct answer proves that standard IP access lists can only filter by source IP address. The distractors are features of extended access lists or Layer 2 filtering.
Q3. Which three statements about the features of SNMPv2 and SNMPv3 are true? (Choose three.)
Answer: A,B,D. SNMPv3 enhanced SNMPv2 security features. || SNMPv2 added the Inform protocol message to SNMP. || SNMPv2 added the GetBulk protocol message to SNMP.
The correct answers prove the specific protocol message additions for each version. The trap is confusing which version added Inform and GetBulk messages.
Q4. Which three elements must be used when you configure a router interface for VLAN trunking? (Choose three.)
Answer: A,C,F. one subinterface per VLAN || one IP network or subnetwork for each subinterface || subinterface encapsulation identifiers that match VLAN tags
The correct answers prove the fundamental requirements for router-on-a-stick. The distractors misstate physical or configuration dependencies.
Q5. Which component of a routing table entry represents the subnet mask?
Answer: D. network mask
The correct answer proves that the network mask is the component used for route matching. The distractors are other routing table fields.
Q6. Which technology can enable multiple VLANs to communicate with one another?
Answer: B. inter-VLAN routing using a Layer 3 switch
The correct answer proves that inter-VLAN routing requires a Layer 3 function. The distractors incorrectly suggest Layer 2 solutions or misapply Layer 3 terms.
Q7. Which IPv6 header field is equivalent to the TTL?
Answer: A. Hop Limit
The correct answer proves that Hop Limit is the TTL equivalent in IPv6. The distractors are other IPv6 header fields.
Q8. Which of the following are control plane functions (Select all) * Encapsulation
Answer: B,C,D,E. * ARP || * MAC address discovery || * NDP || * Routing protocol
The correct answers prove that the control plane handles network intelligence. The distractor, QoS, is a data plane function.
Q9. Which of the following are the correct descriptions for the bridge ID when using the extended system ID (select 3)
Answer: A,D,F. * Priority value is 4 bits || * Priority is a multiple of 4096 || * Extended system ID is 12 bits
The correct answers prove the specific bit allocation and priority constraints of the extended system ID. The distractors provide incorrect bit values or priority ranges.
Q10. What do Layer 2 switches use to determine the destination of the received frame?
Answer: E. * Destination MAC address
Layer 2 switches use the destination MAC address to forward frames. Source IP, default gateway, and IP addresses are incorrect.
Q11. A network administrator needs to configure a serial link between the main office and a remote location. The router at the remote office is a non-Cisco router. How should the network administrator configure the serial interface of the main…
Answer: A. Main(config)# interface serial 0/0 Main(config-if)# ip address 172.16.1.1 255.255.255.252 Main(config-if)# encapsulation ppp Main(config-if)# no shut
The correct answer proves that PPP encapsulation is required for interoperability with non-Cisco devices, unlike Cisco-proprietary HDLC. The distractor B lacks an encapsulation method, while C and D use incorrect or non-standard encryptions.
Q12. Which of the following zones are involved in the firewall rule creation (select 3)
Answer: A,B,D. * External zone || * Internal zone || * Dmz
The correct answers prove that firewalls use three primary zones: internal (trusted), external (untrusted), and DMZ (semi-trusted). The distractors use non-standard zone names or fail to represent the core firewall model.
Q13. When connecting Cisco's AP1 to Cisco's SW using PoE, AP1 has been assigned an appropriate power class, but AP2 is assigned a power class higher than what was necessary. Which of the following is the cause of this?
Answer: C. * Because CDP is used to assign the correct power classes
The correct answer proves that CDP negotiates power classes for PoE, and a failure results in higher default power. The distractors incorrectly involve routing, cabling, or trunking protocols that do not affect power allocation.
Q14. What will be the effect of executing the following command on port F0/1? switch(config-if)# switchport port-security mac-address 00C0.35F0.8301
Answer: D. The command statically defines the MAC address of 00c0.35F0.8301 as an allowed host on the switch port.
The correct answer proves that the command statically allows a specific MAC address. The distractors incorrectly claim prohibition, ACL functionality, or encryption, which are not features of port-security MAC configuration.
Q15. Which statement about native VLAN traffic is true?
Answer: A. Traffic on the native VLAN is tagged with 1 by default
The correct answer proves that native VLAN traffic is untagged by default. The distractor incorrectly claims CDP traffic uses it by default, while native VLANs are typically enabled for backward compatibility, not disabled for security.
Q16. What are two characteristics of Frame Relay point-to-point subinterfaces? (Choose two.)
Answer: A,C. They require a unique subnet within a routing domain. || They emulate leased lines.
The correct answers prove that Frame Relay subinterfaces emulate leased lines and require unique subnets. The distractor 'full-mesh' is incorrect for point-to-point, while 'split-horizon' issues do not apply here.
Q17. If primary and secondary root switches with priority 16384 both experience catastrophic losses, which tertiary switch can take over?
Answer: C. a switch with priority 20480
The correct answer proves that the lowest bridge ID (highest numerical priority) wins the root election among remaining switches. The distractor with priority 8192 is lower (higher priority) and would not be chosen.
Q18. After you configure the Loopback0 interface, which command can you enter to verify the status of the interface and determine whether fast switching is enabled?
Answer: D. Router#show ip interface loopback 0
Correct answer verifies specific interface protocol status. Other commands show basic config or hardware details, not fast-switching capability.
Q19. Which command can you execute to set the user inactivity timer to 10 seconds?
Answer: B. SW1(config-line)#exec-timeout 0 10
Correct answer shows proper syntax for minutes and seconds. The distractor lacks the zero minutes required for immediate timeout after seconds.
Q20. Which of the following are the correct descriptions of the private address (select 2)
Answer: A,B. * Network administrators can allocate it freely || * 172.16.1.1 is a private address
Private addresses are freely allocated in RFC 1918 ranges and are not routable on the internet. Other options incorrectly describe public addresses or routing behavior.
Q21. You are working in a data center environment and are assigned the address range 10.188.31.0/23. You are asked to develop an IP addressing plan to allow the maximum number of subnets with as many as 30 hosts each. Which IP address range mee…
Answer: A. 10.188.31.0/27
/27 provides the maximum subnets while supporting 30 hosts. Larger masks don't support enough hosts, and smaller masks don't create enough subnets.
Q22. Which of the following is a correct description of a TCP connection? (Select 3)
Answer: A,D,E. * Confirm that data has arrived by the ""ACK"" packet || * Establish a connection with ""SYN"", ""ACK + SYN"", ""ACK"" over three transactions || * TCP connection establishes before starting to send data
TCP uses a three-way handshake to establish a connection before data transfer and confirms data receipt with ACK packets.
Q23. Which command enables DHCP snooping?
Answer: D. * (CONFIG) #IP DHCP Snooping
The 'ip dhcp snooping' command globally enables DHCP snooping on a switch.
Q24. Which command is used to enable RSTP?
Answer: E. * Spanning-tree mode rapid-pvst
The 'spanning-tree mode rapid-pvst' command enables Rapid PVST+, which is Cisco's implementation of RSTP.
More CCNA (Cisco Certified Network Associate) Exams 2026 drills and other practice exams are on @CertPunch. New rounds drop every few days at certpunch.com.