Test your CCNA knowledge with 16 exam-style questions, clean answer reveals, and concise explanations. Topics include: Which type of ML involves training with labeled data sets?. Follow @CertPunch and visit certpunch.com for more certification practice videos and study content.
Prefer hands-on? Take this round as an interactive practice test — answer every question, get instant feedback, and see your score: Start the CCNA practice test →
What you will practice
- Which type of ML involves training with labeled data sets?
- You issue the following command on R1: R1(config-router)# default-information originate What kind of router i…
- R1 is connected to a broadcast OSPF segment with four other routers. R1 is neither DR nor BDR for the segment…
- What is the 802.11 frame type of association request and response messages?
- Which of the following protocols is commonly used for a secure site-to-site VPN?
- Examine R1's routing table below. Which interface will R1 use to forward a packet destined for IP address 198…
Answers and explanations
Tap a question to expand the answer and the exam reasoning. Try to commit to your own pick first.
Q1. Which type of ML involves training with labeled data sets?
Answer: B. Supervised learning
Supervised learning uses labeled data sets to train models. Unsupervised learning, in contrast, works with unlabeled data.
Q2. You issue the following command on R1: R1(config-router)# default-information originate What kind of router is R1 as a result of this command?
Answer: C. ASBR
The router becomes an ASBR by injecting an external default route into the OSPF domain. The trap is confusing ASBR with ABR, which redistributes between OSPF areas, not external routes.
Q3. R1 is connected to a broadcast OSPF segment with four other routers. R1 is neither DR nor BDR for the segment. With how many routers on the segment does R1 exchange LSAs?
Answer: D. Two
DROTHERs only exchange LSAs with the DR and BDR. The question tests knowledge of OSPF adjacency reduction on multi-access networks.
Q4. What is the 802.11 frame type of association request and response messages?
Answer: A. Management
These are management frames used for client association. The distractor 'Probe' is a related but incorrect frame type.
Q5. Which of the following protocols is commonly used for a secure site-to-site VPN?
Answer: A. IPsec
IPsec is the industry standard for encrypting site-to-site VPN traffic over untrusted networks. TLS is typically for client-server.
Q6. Examine R1's routing table below. Which interface will R1 use to forward a packet destined for IP address 198.0.32.1? S* 0.0.0.0/0 [1/0] via 192.168.16.6 D E2 0.0.0.0/4 [110/20] via 192.168.15.5, 00:00:11, GigabitEthernet0/4 C 192.168.1.0/…
Answer: D. GigabitEthernet0/5
The default route is used. R1 forwards packets to the next hop via its directly connected interface. The test is longest prefix match.
Q7. R1's G0/1 is configured with IP address 10.20.20.1/24, and R1's G0/2 is configured with IP address 10.20.21.1/24. Which of the following commands will activate OSPF on both interfaces with a single command?
Answer: D. network 10.20.16.0 0.0.7.255 area 0
The OSPF network command uses a wildcard mask to match interface IP addresses. The correct wildcard mask option covers both subnet addresses, while other options only match one or neither.
Q8. Examine the network diagram below: You configure the four ACLs below on R1: R1(config)# ip access-list extended 101 R1(config-ext-nacl)# permit udp host 10.0.0.10 host 192.168.1.100 eq 514 R1(config-ext-nacl)# deny udp any host 192.168.1.1…
Answer: B. ACL 101
ACL 101 correctly permits UDP syslog from PC1 to the server and denies other UDP syslog traffic to the server, while allowing all other traffic through.
Q9. Which of the following commands will not result in an interface being disabled, but will generate Syslog messages when a Port Security violation occurs?
Answer: B. switchport port-security violation restrict
The restrict action discards violating frames and logs the event but does not shut down the port, unlike the shutdown action.
Q10. You configure DHCP snooping on SW1 as below. SW1(config)# ip dhcp snooping SW1(config)# no ip dhcp snooping information option SW1(config)# interface g0/0 SW1(config-if)# ip dhcp snooping trust However you notice that SW1 does not inspect…
Answer: B. You need to enable DHCP snooping on the VLAN.
DHCP snooping must be explicitly enabled on a VLAN to inspect traffic. The common mistake is assuming global configuration is sufficient, while VLAN-level enablement is required.
Q11. Which of the following is an example of MFA?
Answer: D. You swipe a key card and then do a fingerprint scan.
The correct answer proves that multi-factor authentication requires two distinct factors, like something you have and something you are. Option A is a distractor because both factors are biometric.
Q12. Examine R1's routing table. Which interface will it use to forward a packet destined for 203.0.113.113?
Answer: A. GigabitEthernet0/1
The correct answer proves that the router uses the most specific route to determine the exit interface. The longer prefix length for 203.0.113.96/27 is more specific than 203.0.113.96/28.
Q13. Which of the following commands correctly configures a LAG connected to a Cisco AireOS WLC?
Answer: B. channel-group 1 mode on
This question verifies knowledge that Cisco WLCs require static LAG configuration using the 'mode on' command. The other options describe dynamic LAG protocols for switches and are incorrect.
Q14. Which of these commands can be used to make a FastEthernet interface have an OSPF cost of 1000?
Answer: C. R1(config-router)# auto-cost reference-bandwidth 100000
The answer proves that OSPF cost is calculated using the reference bandwidth. This question tests the ability to calculate the correct reference bandwidth needed to achieve a desired cost.
Q15. Which type of API is used for communications between a controller and the network devices?
Answer: D. Southbound
This question confirms that southbound APIs manage the controller-to-device layer, while northbound APIs connect controllers to applications.
Q16. Examine the JSON-formatted data below. Which of the following statements is true? { "network": { "version": 2, "renderer": "networkd", "wifis": { "wlp2s0b1": { "dhcp4": "no", "dhcp6": "no", "addresses": [ "192.168.0.21/24" ], "nameservers"…
Answer: B. A curly brace is missing.
This question tests validation of JSON syntax. The key is to recognize that the structure is missing a closing brace, making it syntactically invalid.
More CCNA drills and other practice exams are on @CertPunch. New rounds drop every few days at certpunch.com.