CCNA Practice Test 2 — 10 Questions

Question 1

Which data format is commonly used with REST APIs to represent objects, arrays, and key-value pairs?

Accepted Answer

JSON. JSON is a common data-interchange format used in APIs and automation systems.

Answer

STP

Answer

EIGRP

Answer

802.1Q

Question 2

Why is SSH preferred over Telnet for remote device administration?

Accepted Answer

SSH encrypts management traffic, while Telnet sends data in clear text. SSH protects credentials and management traffic by encrypting the session. Telnet does not provide encryption, so usernames, passwords, and commands can be exposed in transit.

Answer

SSH uses less bandwidth because it removes the TCP header

Answer

SSH works only on console ports, which are more secure

Answer

SSH does not require user authentication

Question 3

As a general rule, where should an extended ACL be placed?

Accepted Answer

As close to the source as practical. Extended ACLs are commonly placed near the source to stop unwanted traffic earlier and conserve bandwidth and device resources.

Answer

As close to the destination as possible in all cases

Answer

Only on the default gateway

Answer

Only on WAN interfaces

Question 4

A switch shows this output:

Gi0/1  on  802.1q trunking  1
Gi0/2  auto n-802.1q trunking 1

Which statement is correct?

Accepted Answer

Gi0/1 is trunking, and Gi0/2 is waiting for DTP negotiation. Gi0/1 is already operating as an 802.1Q trunk. Gi0/2 is in dynamic auto mode, which waits for the other side to actively negotiate trunking.

Answer

Gi0/1 is an access port in VLAN 1

Answer

Gi0/2 is forced to trunk mode

Answer

Neither interface can carry tagged traffic

Question 5

A switchport is configured for 802.1X authentication. What is the usual role of the RADIUS server in that design?

Accepted Answer

It validates authentication credentials for the supplicant.. The switch acts as the authenticator and forwards authentication requests to the RADIUS server, which validates the user or device credentials.

Answer

It provides Layer 2 trunk negotiation for the supplicant.

Answer

It replaces the need for DHCP on the access layer.

Answer

It generates ARP replies on behalf of the default gateway.

Question 6

Two switches form an EtherChannel. One side is configured with LACP active. Which setting on the other side will successfully negotiate the bundle?

Accepted Answer

LACP passive. LACP forms when at least one side is active and the other side is active or passive.

Answer

PAgP desirable

Answer

on

Answer

PAgP auto

Question 7

Which two practices most improve safety when automating network changes? (Choose two.)

Accepted Answer

Testing changes in a lab or staging environment first. Testing and validation reduce risk before wide deployment, and version control with review/rollback supports controlled operations.

Answer

Running scripts directly in production without validation

Answer

Disabling backups so changes apply faster

Question 8

A REST API query returns this JSON snippet:

{
  "interface": {
    "name": "GigabitEthernet1",
    "admin-status": "up",
    "oper-status": "down"
  }
}

What does this indicate?

Accepted Answer

The interface is enabled but the link is not operational.. The interface is administratively enabled, but it is not operationally passing traffic or achieving link.

Answer

The interface is shut down by configuration.

Answer

The interface is operating normally.

Answer

The interface is a loopback.

Question 9

What data format is commonly used in REST API responses because it is lightweight and easy for applications to parse?

Accepted Answer

JSON. JSON is widely used in REST APIs for structured data exchange.

Answer

BGP

Answer

STP

Answer

ARP

Question 10

A show ip nat translations command displays this entry:

Inside global 203.0.113.10:30001
Inside local 192.168.10.25:51514
Outside local 198.51.100.20:443
Outside global 198.51.100.20:443

Which statement is correct?

Accepted Answer

192.168.10.25 is the inside local address of the host. Inside local is the actual address assigned to the inside host before translation. The inside global address is the public representation used after NAT, and the port values show PAT is in use.

Answer

203.0.113.10 is the inside local address of the host

Answer

198.51.100.20 is the translated private address of the internal client

Answer

The entry proves static NAT is being used without port translation