CCNA Practice Test 5 — 10 Questions

Question 1

What is the main security benefit of using the principle of least privilege?

Accepted Answer

It limits access to only what is necessary, reducing unnecessary exposure and potential damage.. The principle of least privilege limits users or systems to only the access they actually need. In plain language, it reduces risk by avoiding unnecessary permissions. If an account is compromised or a mistake is made, the potential damage is smaller because the account does not have broad powers it never needed in the first place.

This is a conceptual question, but it matters in many technical designs. The correct answer is the one that focuses on reducing exposure and limiting the impact of misuse rather than on convenience or performance.

Answer

It guarantees every user full administrative access when needed.

Answer

It disables all logging to improve performance.

Answer

It forces all traffic into VLAN 1.

Question 2

Which statement best describes why a token might be used in an API request instead of sending a username and password with every request?

Accepted Answer

A token can provide a controlled way to authenticate or authorize API access without sending raw credentials every time.. A token can be used because it provides a more controlled and often more practical way to authorize or authenticate repeated API access without exposing raw credentials in every interaction. In plain language, the system can issue a token that the client presents on later requests, which can simplify automation workflows and improve security handling. This does not mean tokens remove the need for security; they are part of how secure API access is often managed.

This is increasingly common in controller and automation environments. The correct answer is the one that recognizes tokens as an access-control mechanism for API interaction rather than as a routing or VLAN concept.

Answer

A token is the IPv4 subnet mask for controller traffic.

Answer

A token is the STP root bridge identifier.

Answer

A token forces the API to use Telnet.

Question 3

Match each API security or access term to its most accurate description.

Question 4

What is the main reason extended ACLs are often placed closer to the source of the traffic being filtered?

Accepted Answer

To stop unwanted traffic earlier and avoid carrying it farther through the network.. Extended ACLs are often placed close to the source so unwanted traffic is stopped earlier in the path. In practical terms, that conserves bandwidth and reduces unnecessary forwarding of traffic that will be denied anyway. Because extended ACLs can match more specific conditions such as source, destination, and protocol, they are especially useful early in the traffic path.

This is a standard ACL placement principle. The goal is not just security logic, but efficient use of the network as well.

Answer

Because extended ACLs can function only on source interfaces.

Answer

Because standard ACLs must always be placed near the destination instead.

Answer

Because ACL placement has no effect on network efficiency.

Question 5

Which statement best describes integrity in the CIA triad?

Accepted Answer

Protecting information from unauthorized modification. Integrity is about protecting data from unauthorized changes and helping ensure that information remains accurate and trustworthy. In plain language, it answers the question of whether the data has been altered improperly. This is different from confidentiality, which is about preventing unauthorized disclosure, and availability, which is about access when needed.

This distinction matters because many security controls target one part of the CIA triad more directly than the others. The correct answer is the one focused on unauthorized modification rather than disclosure or uptime.

Answer

Making information available at all times

Answer

Preventing unauthorized people from seeing the data

Answer

Recording all commands for audit

Question 6

Which statement best describes the purpose of administrative distance when two different routing sources advertise the same prefix?

Accepted Answer

It ranks the trustworthiness of different route sources advertising the same destination.. Administrative distance helps the router decide which route source to trust more. In plain language, if the same network is learned from two different sources, such as OSPF and a static route, the router needs a source-preference rule before it can install one. Administrative distance provides that rule.

This is different from a metric, which typically compares multiple paths inside the same routing protocol. The correct answer is the one focused on source trust rather than path cost inside one protocol.

Answer

It determines the MAC address of the next hop.

Answer

It specifies the native VLAN for trunk links.

Answer

It defines the subnet mask of the learned route.

Question 7

Match each automation transport or interaction term to its most accurate description.

Question 8

A switch port connected to an end host is configured with both PortFast and BPDU Guard. What is the most likely outcome if a small switch is connected there and starts sending BPDUs?

Accepted Answer

The port is error-disabled by BPDU Guard.. The most likely outcome is that the port is placed into an error-disabled state by BPDU Guard. In plain language, PortFast treats the port as an edge port for faster startup, while BPDU Guard protects that assumption. If the switch receives a BPDU on a port that was supposed to connect only to an end device, it reacts by shutting the port down to help prevent accidental loops or topology problems.

This is one of the most recognizable edge-port protection behaviors in switching. The correct answer is the one focused on err-disable due to unexpected BPDU receipt.

Answer

The port automatically becomes the root port.

Answer

The port converts into a trunk for the attached switch.

Answer

The port ignores the BPDU because PortFast disables STP entirely.

Question 9

A router has routes for 10.10.0.0/16, 10.10.20.0/24, and a default route. Which route is used for destination 10.10.20.55?

Accepted Answer

The 10.10.20.0/24 route. The destination matches multiple routes, but the /24 is the most specific match and wins by longest prefix match.

Answer

The 10.10.0.0/16 route

Answer

The default route

Answer

The router load-balances across all matching routes

Question 10

Why is NTP especially useful when devices send logs to a centralized Syslog server?

Accepted Answer

It helps align device clocks so centralized log timestamps can be correlated more accurately.. NTP is especially useful because synchronized clocks make the log timestamps more meaningful and easier to correlate. In plain language, if each device thinks the current time is different, the sequence of events in the centralized log becomes confusing. NTP helps align time across devices so the logs tell a more accurate story.

This is an operational best practice. Syslog collects the messages, and NTP makes their timing consistent. The correct answer is the one focused on timestamp correlation.

Answer

It assigns the Syslog server an IP address.

Answer

It replaces the need for a Syslog server.

Answer

It encrypts every Syslog message automatically.