Practice for the CCNA exam with 23 multiple-choice questions. Answer each question before the reveal, then review the explanation to understand the reasoning.
This is Part 7/8 in the CertPunch CCNA practice exam series.
Topics covered: switching, routing, subnetting, access control lists, wireless, security fundamentals, and network troubleshooting.
More practice: certpunch.com
What you will practice
- Which of the following correctly explains Cisco DNA Center's SBI? (Select 2)
- Which of the following are correct descriptions of STP role selection? (Select 2)
- Which protocol is the Cisco proprietary implementation of FHRP?
- Which of the following are correct descriptions of ARP spoofing (select 2)?
- Which type of device can be replaced by the use of subinterfaces for VLAN routing?
- What is the correct routing match for a packet destined for 172.16.1.5/32?
Answers and explanations
Tap a question to expand the answer and the exam reasoning. Try to commit to your own pick first.
Q1. Which of the following correctly explains Cisco DNA Center's SBI? (Select 2)
Answer: A,C. * Support for conventional access methods such as Telnet / SSH / SNMP || * Uses netconf / restconf for a relatively new device
Cisco DNA Center uses both conventional access like Telnet/SSH and newer methods like NETCONF/RESTCONF. Option B incorrectly states Telnet is not supported.
Q2. Which of the following are correct descriptions of STP role selection? (Select 2)
Answer: C,E. * The switch with the smallest bridge ID in the L2 network becomes the root bridge || * In the segment, the port of the switch with the smallest route path cost is the specified port
The root bridge is the switch with the lowest bridge ID. The designated port on a segment is the port with the lowest path cost to the root bridge.
Q3. Which protocol is the Cisco proprietary implementation of FHRP?
Answer: A,C. HSRP || GLBP
HSRP and GLBP are Cisco proprietary FHRPs. VRRP is an open standard.
Q4. Which of the following are correct descriptions of ARP spoofing (select 2)?
Answer: C,D. * Intermediate attack using ARP || * Can be prevented by DAI
ARP spoofing is an attack that uses ARP to intercept traffic. DAI prevents it by validating ARP packets against a trusted database.
Q5. Which type of device can be replaced by the use of subinterfaces for VLAN routing?
Answer: C. Layer 3 switch
Subinterfaces on a router perform inter-VLAN routing, a function also provided by a Layer 3 switch.
Q6. What is the correct routing match for a packet destined for 172.16.1.5/32?
Answer: B. 172.16.1.0/26
The most specific longest prefix match in the routing table is used for forwarding. /26 is more specific than /25 or /24.
Q7. Which of the following can be implemented by introducing Cisco DNA Center (select 2)?
Answer: A,D. * Rapid development || * Control of network by the self-made program
The correct answers prove Cisco DNA Center's role in automated network deployment and programmatic control. The distractors are traps claiming equipment reduction or security elimination.
Q8. Which of the following are used to perform authentication in SNMPv2c?
Answer: C. * Community string
The correct answer proves SNMPv2c's use of community strings for authentication. The distractors are traps for advanced protocols available in SNMPv3.
Q9. Which of the following requests an IP address from the host name in the DNS lookup?
Answer: E. * Forward lookup
The correct answer proves the definition of a forward lookup. The distractors are traps for reverse lookups or unrelated protocols.
Q10. Select the highest priority item that is used to determine DR (representative router) in OSPF. * IP address
Answer: B. * Priority value
Priority value is the first criterion for selecting an OSPF DR. Router ID is only used if priorities are equal, making it a secondary criterion.
Q11. Which of the following are the correct descriptions about the router's config mode? (select 3)
Answer: A,C,F. * If you disable CDP in this mode, CDP will be disabled for all interfaces || * Sets the router body in this mode || * Global configuration mode
Correct answer identifies the global configuration mode. The trap is mistaking it for interface or router-specific configuration mode based on the prompt.
Q12. Which of the following are the correct descriptions of unicast?
Answer: A. * Sends a packet to a single partner
The correct answer proves that unicast sends a packet to a single destination. The distractors incorrectly describe unicast as multicast, broadcast, or discontinued in IPv6.
Q13. Where do you get global IP address from?
Answer: C. * ISP
The correct answer proves that ISPs assign public global IP addresses for Internet connectivity. The distractors are irrelevant entities; network administrators allocate private addresses, not public ones.
Q14. In a situation where there is no default route in the routing table, which command should be used to achieve the advertisement of the default route by OSPF?
Answer: C. * (Config-Router) # DEFAULT-INFORMATION ORIGINATE ALWAYS
The correct answer proves that DEFAULT-INFORMATION ORIGINATE ALWAYS advertises a default route without one. The trap is distractor D, which requires the route to exist, and distractor A is a command to suppress updates.
Q15. Which method is used to automatically build an enterprise campus LAN, provided by Cisco?
Answer: E. * SD-ACCESS
SD-Access uses intent-based networking for automated campus LAN deployment. This eliminates routing protocols like EIGRP and OSPF as potential answers.
Q16. Which of the following is a description of "wide network access" as a feature of cloud computing? * The addition and extension of resources on demand
Answer: D. * Can be used without the need for a physical device or location
Wide network access allows resource access without a physical device or location. The distractors describe other cloud features like on-demand self-service or resource sharing.
Q17. Which is the correct description of the operations of a switch configured for VLANs?
Answer: A. * If the destination MAC address is not registered in the MAC address table, it transfers to all ports (except for the receiving port) if the VLAN is not set.
A switch floods an unknown destination MAC to all ports in the same VLAN. The distractors incorrectly describe trunk ports, inter-VLAN communication, and broadcast behavior.
Q18. What are the correct descriptions of HDLC (select 2)
Answer: A,D. * A default encapsulation type of serial interface || * Cisco uses your own HDLC, with type fields added to ISO standard HDLC
HDLC is a default Cisco serial encapsulation. Cisco's proprietary HDLC adds a type field, making it incompatible with non-Cisco devices.
Q19. Which of the following can be implemented by SDN? (select 2)
Answer: C,E. * You can dynamically change the network topology according to the status of traffic on the SDN controller || * Network can be virtualized using VTN with the SDN controller
SDN enables dynamic topology changes and network virtualization. The distractors misplace SDN functions like per-device deployment or VM management.
Q20. With a class C address and 13 subnets, which of the following subnet masks can prepare the most amount of hosts?
Answer: D. * 255.255.255.240
Four subnet bits support 16 subnets. The mask /240 maximizes hosts while meeting the subnet requirement. Distractors use insufficient or excessive subnet bits.
Q21. From the following, select the correct explanation of FTP (select 2)
Answer: A,F. * Has the ability to authenticate || * It is a protocol used for file transfer
FTP supports authentication and is a file transfer protocol. It is unencrypted and uses TCP, not UDP, ARP, or TFTP features.
Q22. Show SNMP community Which item can be confirmed by the this command?
Answer: C. * Community string
The correct answer proves the `show snmp community` command displays configured community strings. The distractors are SNMP configuration parameters visible with different commands.
Q23. In the cloud service model, which of the following is the name of a "platform provided in the form of service"?
Answer: C. * PaaS
PaaS provides a development platform for users, whereas SaaS is software and IaaS is infrastructure.
More CCNA (Cisco Certified Network Associate) Exams 2026 drills and other practice exams are on @CertPunch. New rounds drop every few days at certpunch.com.