Free CCNA Practice Exam

Testing yourself is the fastest way to find the gaps in your CCNA preparation. Reading a chapter can make it feel familiar. Answering questions on it tells you whether you actually know it.

This free practice exam covers CCNA network fundamentals — the OSI and TCP/IP models, Ethernet framing, addressing, ARP, TCP and UDP, and switching operation. Note that some topics not listed in the syllabus are included. We have done that for a good reason. Remember, Cisco does say on the exam syllabus that they are free to ask you about topics not listed!

1. What are the benefits of microsegmentation?

Microsegmentation creates dedicated network segments

Collisions no longer occur if full-duplex is used

Collisions occur at a higher rate

If half-duplex is used, collisions no longer occur

Question 1 of 50

2. What is the term for the mechanism through which the sender and receiver agree on how much data can be sent before an acknowledgement is sent from the receiver?

Flow Control

Synchronization

Windowing

Acknowledgement

Question 2 of 50

3. At what layers in an OSI model is a firewall used?

Transport layer

Presentation layer

Application layer

Session layer

Question 3 of 50

Which debug command produces this output?

debug tcp telnet

debug telnet

debug ip telnet

debug telnet session

Question 4 of 50

5. What are the possible destination Ethernet addresses?

Broadcast

Multicast

Flood

Unicast

Question 5 of 50

6. What are the switching methods?

Fragment-through

Cut-through

Fragment-free

Store-and-foward

Question 6 of 50

7. You connect two hosts in a new brand switch, and they can reach each other. How is this possible without any configuration?

By default, there is a routing policy between all the ports

By default, all the ports belong to VLAN 1

By default, the switch doesn't have any VLAN configured

By default, the switch allows the traffic only between hosts and not between routers or firewalls

Question 7 of 50

8. Which statements are true about Layer 2 links on a switch?

A trunk link is used to carry traffic from a single VLAN

A switch port that is defined as a member of one VLAN is referred to as an access link

A trunk link is used to carry traffic from multiple VLANs at the same time

A switch port that is defined as a member of multiple VLANs is referred to as a trunk link

Question 8 of 50

9. You try to add a new VLAN on the switch, and this error is returned: '%VTP VLAN configuration not allowed when device is in CLIENT mode.' What is the reason for this error?

The device was set in VTP server

The device was set in VTP transparent mode

The device was set in VTP client mode

The device was set in VTP off mode

Question 9 of 50

10. Which of the following are address types supported in IPv6?

Broadcast

Link-local

Site-local

Anycast

Question 10 of 50

11. What is the equivalent of the OSPFv2 designated routers address in IPv6 addressing?

FF06::6

FF06::5

FF02::6

FF02::5

Question 11 of 50

12.

Considering the below topology (f0/0 is used on both routers) and the output collected from R2, what seems to be the problem?

Interface f0/0 is not up on R2

ipv6 unicast-routing" is not configured on R1"

ipv6 unicast-routing" is not configured on R2"

/64 prefix is not allowed to be configured on p2p links

Question 12 of 50

13. What is the administrative distance for OSPF protocol?

110

100

105

120

Question 13 of 50

14. Which of the following are distance vector problems?

Routing loops

Excessive memory utilization

Counting to Infinity

Excessive CPU utilization

Question 14 of 50

15. Which of the following are benefits of using CEF?

Increased performance

Scalability

Memory optimization

Resilience

Question 15 of 50

16. How can we assign a router its router-id?

By using the router-id" command"

By choosing an IP address from a Loopback interface

By choosing an IP address from any configured physical interface

By choosing an IP address from an active physical interface

Question 16 of 50

17. What are some of the drawbacks of using OSPF protocol?

Routing loops

High CPU utilization

Bandwidth utilization

Slow convergence

Question 17 of 50

18. What is the source IP address of a DHCP Request message?

The IP address that was provided through the DHCP Offer message

There is no IP address as the host still doesn't have an IP address

0.0.0.0

255.255.255.255

Question 18 of 50

19. You would like to deny traffic from the 172.16.100.32/27 subnet. What will you enter into the ACL?

access-list 10 deny 172.16.100.32 255.255.255.224

access-list 10 deny 172.16.100.32 255.255.255.225

access-list 10 deny 172.16.100.32 0.0.0.31

access-list 10 deny 172.16.100.32 0.0.0.32

Question 19 of 50

20. Which of the following are ACL rules that one should be aware of in order to avoid configuration and troubleshooting issues?

You cannot disable the ACL on the interface

The Lines Are Processed Top-Down

There Is an Implicit Deny All at the Bottom of Every ACL

The Router Can’t Filter Self-Generated Traffic

Question 20 of 50

21. Which of the following are advantages of having the capability to assign sequence numbers to ACL entries?

The possibility to reorder ACL entries

The possibility to remove any ACL entry

The possibility to rename any ACL entry

The possibility to add an ACL entry anywhere in the list

Question 21 of 50

22.

PC_1 is trying to connect to PC_2. What will be the content of the NAT table on R1?

Question 22 of 50

23. What debug command is needed to see the NAT translations taking place on a router?

debug nat

debug ip packets nat

debug ip nat

debug nat translations

Question 23 of 50

24.

Which of the following statements are correct based on the below output?

The NTP server is using an external server to get the correct time

The stratum is 3

The clock is unsynchronized

The clock is synchronized

Question 24 of 50

25. What port security command needs to be used so that a MAC address learned by the switch is added in the running configuration?

switchport port-security sticky

switchport port-security sticky mac-address

switchport port-security mac-address sticky

switchport port-security mac-address learned sticky

Question 25 of 50

26.

Which of the following sets of commands will allow the switch to recover from an err-disable state caused by storm-control after 30 seconds?

Question 26 of 50

27.

Considering the below output, what will be the output returned by the switch when the command 'switchport port-security' is added under Gi0/0?

Command accepted: Ethernet0/0 is a dynamic port.""

No output will be returned. The port will be activated for port security

Command rejected: Ethernet0/0 is a dynamic port.""

There is no such command that can be configured under a switchport interface

Question 27 of 50

28. How long does it take for a switch to move from Listening state to Learning state in 802.1D?

30 seconds

20 seconds

15 seconds

50 seconds

Question 28 of 50

29. What is the correct order of the decision-making process to determine which port will be the root port?

stp_q_alg

C, A, B, D

C, B, A, D

C, B, D, A

C, D, A, B

Question 29 of 50

30. What are the timers that monitor and age BPDUs?

Hello

Forward Delay

Max Age

Dead

Question 30 of 50

31. Which of the following are configuration requirements for the component ports for LACP and PAgP?

Same speed and duplex

Allowed VLAN list

STP PortFast settings

Same hash algorithm

Question 31 of 50

32. Which of the following are not LACP modes?

Active

Desirable

Passive

Question 32 of 50

33.

Considering the below output, what was the configuration command used to set the hash algorithm for port-channels?

port-channel load-balance ip

port-channel load-balance src-dst-ipv4

port-channel load-balance src-ip-dst-ip

port-channel load-balance src-dst-ip

Question 33 of 50

34. Which of the following are required steps to enable SSH on a router?

Set the hostname and domain name

Configure idle timeout

Generate crypto keys for encryption

Configure authentication retries

Question 34 of 50

35. What is the IP address to which all the OSPF routers send their updates to DR and BDR routers?

224.0.0.6

224.0.0.5

224.0.0.13

224.0.0.18

Question 35 of 50

36. On a multi-access segment, the DR and BDR were elected. Later, you add a newer router, with more memory and a faster CPU. You would like to make this router the DR on the segment. How can you trigger the DR/BDR process?

Configure a higher OSPF priority on the newly added router

Use clear ip ospf process" to restart OSPF on all routers"

Configure a lower OSPF priority on the newly added router

Configure a better router-id on the newly added router

Question 36 of 50

37. A router has three Serial interfaces, three GigabitEthernet interfaces, and one Loopback interface configured for OSPF. How many LSAs is the router sending?

Seven, one LSA for each interface

One for all interfaces

Three, one LSA for each type of interface

Six, one LSA for each type of physical interface

Question 37 of 50

38. Which of the following are advantages of grouping OSPF interfaces into logical areas?

Reduced size of the link state database, resulting in less impact on router memory

Less impact on a router’s CPU because of the smaller database

LSA flooding is limited within an area, reducing bandwidth usage

Extended diameter of the network up to 15 nodes

Question 38 of 50

39. Which types of LSAs are allowed in stub areas?

Type 5

Type 2

Type 3

Type 1

Question 39 of 50

40.

Based on the below output, what is the OSPF state of R3?

There is no state because R3 is on a point-to-point segment

R3 is BDR

R3 is DR

There is no state available yet because the routers are still in FULL" state"

Question 40 of 50

41.

Based on the output below, from where did R3 get its router-id?

Automatically from GigabitEthernet1/0 interface

Automatically from Loopback0 interface

It might have been assigned using the IP address from Loopback0 interface

It might have been assigned using the IP address from GigabitEthernet1/0 interface

Question 41 of 50

42. Which of the following are parameters used by EIGRP to determine the best path?

Hop count

Delay

Load

Reliability

Question 42 of 50

43. What is the EIGRP protocol number?

100

Question 43 of 50

44.

Considering the output below, what metric will the 10.10.10.2/32 route have in the router's routing table?

2816

128256

130816

Question 44 of 50

45.

Considering the output below taken from R3 and considering that R2 is configured in a similar way, what will be the administrative distance of the 10.10.10.2/32 route in the R3 routing table?

110

170

Question 45 of 50

46. Which of the following is not a First Hop Redundancy Protocol?

Gateway Load Balancing Protocol

Hot Standby Router Protocol

Default Router Redundancy Protocol

Virtual Router Redundancy Protocol

Question 46 of 50

47. What LCP option is described by this statement: 'Monitors dropped data and avoids frame looping'?

Frame Looping

Error Detection

Checksum Monitoring

Multilink

Question 47 of 50

48. What are the Local Management Interface types?

Cisco

ANSI

q933a

IETF

Question 48 of 50

49. A host is configured with the IP address 172.16.45.200/26. What is the broadcast address of the subnet this host belongs to?

172.16.45.191

172.16.45.255

172.16.45.207

172.16.45.223

Question 49 of 50

50. You need to subnet 192.168.10.0/24 into subnets with at least 12 usable host addresses each, while creating as many subnets as possible. Which subnet mask should you use?

255.255.255.192

255.255.255.224

255.255.255.240

255.255.255.248

Question 50 of 50