Test your CCNA knowledge with 19 exam-style questions, clean answer reveals, and concise explanations. Topics include: Your network design requires that GigabitEthernet interfaces have an OSPF cost of 100. Which of the following commands s. Follow @CertPunch and visit certpunch.com for more certification practice videos and study content.
Prefer hands-on? Take this round as an interactive practice test — answer every question, get instant feedback, and see your score: Start the CCNA part: 3 practice test →
What you will practice
- Your network design requires that GigabitEthernet interfaces have an OSPF cost of 100. Which of the following…
- When configuring DHCP relay on a Cisco router, where must you configure the ip helper-address command?
- Which of the following is a benefit of RFC 1918?
- Which LWAP mode captures 802.11 frames for analysis in Wireshark?
- Which REST API authentication method allows a client to access a resource on a server on behalf of the resour…
- A router learns several routes to 172.16.0.0/16 via different routing protocols. Which route(s) will it inser…
Answers and explanations
Tap a question to expand the answer and the exam reasoning. Try to commit to your own pick first.
Q1. Your network design requires that GigabitEthernet interfaces have an OSPF cost of 100. Which of the following commands should be configured on your routers to achieve this?
Answer: C. auto-cost reference-bandwidth 100000
The correct answer proves how to set the OSPF reference bandwidth to calculate a cost of 100 for a 1 Gbps link. The trap is using a value that results in the wrong cost, like 10000.
Q2. When configuring DHCP relay on a Cisco router, where must you configure the ip helper-address command?
Answer: A. On the LAN interface that receives client broadcast messages
The correct answer proves that the command must be on the interface receiving client broadcasts. The trap is placing the configuration in the pool or on the server-facing interface.
Q3. Which of the following is a benefit of RFC 1918?
Answer: C. It allows internal hosts to use addresses that are not globally unique.
The correct answer proves that RFC 1918 allows the use of non-unique private addresses. The distractor incorrectly claims it provides encryption or expands the public address space.
Q4. Which LWAP mode captures 802.11 frames for analysis in Wireshark?
Answer: A. Sniffer
The correct answer proves that Sniffer mode is for capturing raw frames. The trap is choosing a mode for security analysis, like Rogue Detector.
Q5. Which REST API authentication method allows a client to access a resource on a server on behalf of the resource's owner?
Answer: D. OAuth 2.0
The correct answer proves OAuth 2.0 is for delegated access control. The distractors are simple authentication methods that lack the delegation capability.
Q6. A router learns several routes to 172.16.0.0/16 via different routing protocols. Which route(s) will it insert into its routing table?
Answer: D. EIGRP route, metric 5678
The correct answer proves that administrative distance, not metric, determines the best path when multiple protocols advertise a route. The distractor with the lowest metric is a trap for confusing AD with protocol metric.
Q7. Which of the following commands creates an SVI for inter-VLAN routing on an L3 switch?
Answer: C. interface vlan <vlan-id>
This command proves the creation of a Switch Virtual Interface, the logical entity used for routing between VLANs. The distractor 'ip routing' only enables the global routing function on the switch but does not create the specific interface.
Q8. Which characteristic of cloud computing means that customers should be able to quickly scale their cloud resources up or down as needed?
Answer: B. Rapid elasticity
This proves the definition of rapid elasticity, a core cloud tenet for scalable resources. The distractor 'Resource pooling' describes the back-end model, not the customer-facing ability to scale.
Q9. Which of the following IPv6 multicast addresses is limited to the local link and will not be routed between subnets? Correct answer
Answer: A. ff02::1
The correct answer shows that ff02::1 is a link-local multicast address for all nodes on the same subnet. Distractors use other scopes like global (ff0e::1), site-local (ff05::1), and interface-local (ff01::1).
Q10. Examine the following configurations. Which of the following statements are true? (select two)
Answer: G. G0/1 is an access port
The correct answer proves that 'switchport mode access' configures an interface as an access port. The elimination cue is that access port commands override trunk commands, making 'G0/1 is an access port' true.
Q11. Which Cisco WLC QoS profile is recommended for video traffic?
Answer: A. Gold
The correct answer proves that the Gold profile is optimized for video traffic with moderate latency control. The trap distractors are lower-priority profiles that would not provide adequate quality for video.
Q12. BPDU Filter has been enabled globally for all PortFast-enabled ports. What happens when one of the BPDU Filter-enabled ports receives a BPDU?
Answer: A. PortFast and BPDU Filter are disabled on the port
The correct answer proves that the port reverts to normal STP behavior to prevent loops. The trap is that the port does not remain filtered or error-disabled.
Q13. What is the facility of the following Syslog message? 000062: Jan 20 08:05:52: %LINK-3-UPDOWN: Interface GigabitEthernet0/2, changed state to up
Answer: D. LINK
The correct answer proves that the facility identifies the device subsystem that generated the log message. The trap is confusing the facility with the message level or description.
Q14. Which command can be used to transfer a file from an external FTP server to the local device?
Answer: A. copy ftp: flash:
This command proves the correct syntax for copying a file from a remote FTP server to a local flash storage device. The distractor 'copy flash: ftp:' reverses the source and destination, making it an upload command instead of a download.
Q15. When configuring a hexadecimal WPA2 PSK in a Cisco WLC, how many characters must the PSK be?
Answer: D. 64 characters
The correct answer proves that a hexadecimal WPA2 PSK must be 64 characters long to represent the full 256-bit key. Distractors confuse hex length with ASCII passphrase length.
Q16. Examine the topology below. You must create one extended ACL that blocks HTTP traffic originating from the two LANs attached to R1 (10.1.2.0/24 and 10.1.3.0/24) destined for SRV1. On which interface and in which direction should you apply…
Answer: C. Outbound on R1 Eth1
This answer proves that placing an ACL outbound on the closest router to the source is the most efficient method. The distractor 'Inbound on R2 Eth1' is a common mistake, as it would require the traffic to first cross the network to be filtered.
Q17. You configure this static route: R1(config)# ipv6 route 2001::/16 g0/0 2001:db8:1234:5aff:f234::23fa. Which of the following statements are true? (select all correct answers)
Answer: B. It is a network route
The correct answer demonstrates that a route with a prefix length of /16 is classified as a network route. Distractors are eliminated by applying the definitions of host, default, directly-connected, and fully-specified routes.
Q18. Which of the following ACL entries permits reply traffic from the HTTP server 203.0.113.1 to all clients?
Answer: A. access-list 101 permit tcp 203.0.113.1 0.0.0.0 any eq www
This proves that reply traffic from a server requires the server's IP as the source and its service port (eq www) in the source port field. The distractor with the source port as 'any' fails to match the required source port 80 on the reply.
More CCNA part: 3 drills and other practice exams are on @CertPunch. New rounds drop every few days at certpunch.com.