Test your CCNA knowledge with 17 exam-style questions, clean answer reveals, and concise explanations. Topics include: Which of the following is a valid VRRP virtual MAC address?. Follow @CertPunch and visit certpunch.com for more certification practice videos and study content.
Prefer hands-on? Take this round as an interactive practice test — answer every question, get instant feedback, and see your score: Start the CCNA practice test →
What you will practice
- Which of the following is a valid VRRP virtual MAC address?
- Which of the following is a unique local IPv6 address?
- Examine the network below. PC1, PC2, and PC3 have 8.8.8.8 configured as their DNS server. R1 has a default ro…
- Which of the following commands configure a Rapid-PVST+ Edge port?
- Examine the network below. PC1 needs to be able to communicate with PC2. R1 and R3 already have the necessary…
- PC1 is connected to SW1's G0/1 interface. DHCP snooping is enabled. The router for the LAN is R1, which also…
Answers and explanations
Tap a question to expand the answer and the exam reasoning. Try to commit to your own pick first.
Q1. Which of the following is a valid VRRP virtual MAC address?
Answer: A. 00:00:5e:00:01:a0
A valid VRRP virtual MAC address must start with 00:00:5e:00:01. The other options are invalid MAC address formats for VRRP.
Q2. Which of the following is a unique local IPv6 address?
Answer: B. fd45:93ac:8a8f:1::1
Unique local IPv6 addresses begin with the prefix fd. The other options represent link-local, multicast, or global unicast addresses.
Q3. Examine the network below. PC1, PC2, and PC3 have 8.8.8.8 configured as their DNS server. R1 has a default route to the Internet. Which of the following configurations are required for PC1, PC2, and PC3 to use the server at 8.8.8.8 to reso…
Answer: D. No configurations are needed.
DNS queries are standard IP traffic that routers forward normally; no special helper or relay configuration is needed on the router for this to work.
Q4. Which of the following commands configure a Rapid-PVST+ Edge port?
Answer: B. SW1(config-if)# spanning-tree portfast
PortFast is the standard Cisco IOS command to configure an interface as an edge port, bypassing the STP listening and learning states.
Q5. Examine the network below. PC1 needs to be able to communicate with PC2. R1 and R3 already have the necessary configurations. You configure the following static routes on R2: R2(config)# ipv6 route 2001:db8:0:1::/64 2001:db8:0:12::1 R2(con…
Answer: D. You need to enable IPv6 routing on R2.
IPv6 routing must be explicitly enabled with 'ipv6 unicast-routing' on a Cisco router for it to forward IPv6 packets between its interfaces.
Q6. PC1 is connected to SW1's G0/1 interface. DHCP snooping is enabled. The router for the LAN is R1, which also acts as the DHCP server. However, PC1 is unable to receive an IP address via DHCP. Examine the log messages on R1 below. Which com…
Answer: B. SW1(config)# no ip dhcp snooping information option
The correct answer proves that disabling Option 82 on a switch port resolves a DHCP issue when the server cannot process the option. The trap is thinking the switch port needs to be trusted instead of removing the option from the switch.
Q7. Which command can be configured to prevent a port from sending STP BPDUs?
Answer: A. spanning-tree bpdufilter enable
The correct answer proves that BPDU filter prevents a port from sending or receiving BPDUs. BPDUGuard prevents reception, and PortFast is for edge ports.
Q8. Which protocol can be used to gather information about a device's connected neighbors in a multi-vendor network?
Answer: C. LLDP
The correct answer proves that LLDP is the industry-standard protocol for neighbor discovery on multi-vendor networks. CDP is Cisco proprietary and would not work with other vendors.
Q9. Which WLC interface is dedicated for OOB management?
Answer: B. service port interface
The correct answer proves that the service port interface is the dedicated physical interface for out-of-band management on a WLC. The management interface is logical.
Q10. Which of the following commands configures a directly attached network route?
Answer: D. R1(config)# ip route 10.0.0.0 255.255.128.0 g0/0
The correct answer proves that a directly attached route specifies an exit interface without a next-hop IP address. The other options are either recursive or host routes.
Q11. In the SECURITY tab of a Cisco AireOS WLC, you configure a CPU Access Control List. Which of the following statements describes the purpose of this ACL?
Answer: D. It controls management traffic destined for the WLC.
The correct answer proves that a CPU ACL protects the WLC's management CPU by filtering traffic destined for the controller itself. It does not control traffic to or from access points.
Q12. Which of the following is not a valid static route?
Answer: A. ipv6 route 2001:db8:0:1::/64 fe80::68a7:9389:9807:db9a
The correct answer proves that a static route with a link-local next-hop must be fully specified with an exit interface. The other options are all valid static route configurations.
Q13. Examine the output of show interfaces f0/1 on SW1 below. What does the output tell us? FastEthernet0/1 is up, line protocol is up Hardware is Fast Ethernet, address is 0cf5.a452.b101 (bia 0cf5.a452.b101) Description: ## FW1 ## MTU 1500 byt…
Answer: D. SW1 F0/1 has received messages with an incorrect FCS.
The answer correctly interprets that CRC errors indicate frames with an incorrect FCS. This tests the ability to identify the specific error type from the 'show interfaces' output.
Q14. You issue the following commands on R1: R1(config)# enable password ccna1 R1(config)# enable secret ccna2 R1(config)# username jeremy secret ccna3 R1(config)# line console 0 R1(config-line)# password ccna4 R1(config-line)# login When conne…
Answer: C. password: ccna4
The answer shows that the 'line console 0' configuration takes precedence for direct console access, which requires the specified password.
Q15. In the output of show ip ssh, which version indicates a device that accepts both SSHv1 and SSHv2 connections?
Answer: D. Version 1.99
SSH version 1.99 indicates backward compatibility with both SSHv1 and SSHv2. Option C, Version 2, is a distractor that only supports the newer, more secure version.
Q16. You issue the following commands on R1. Which of the following statements is true?
Answer: D. R1 will load-balance packets destined for 10.0.0.0/24 over three next hops.
Equal-cost load balancing occurs between the three routes with a default administrative distance of 1. The route with AD 2 is a floating backup and is excluded.
Q17. What IP address do VRRP routers use to communicate with each other?
Answer: D. 224.0.0.18
VRRP routers use the multicast address 224.0.0.18 to communicate and share state information. Options A and C are multicast addresses used by other protocols.
More CCNA drills and other practice exams are on @CertPunch. New rounds drop every few days at certpunch.com.