CCNA Practice Test 19 — 15 Questions

Question 1

Drag and drop the following steps into the correct order to configure Rapid PVST+ with a designated root bridge, PortFast, and BPDU Guard on access ports.

Accepted Answer

Set the spanning-tree mode to Rapid PVST+. 1. Set the spanning-tree mode to Rapid PVST+: This enables Rapid PVST+ globally, a prerequisite for the root primary command to function correctly. 2. Configure the switch as the root bridge for VLAN 1: Lowers the bridge priority to guarantee this switch becomes the root, defining the STP topology. 3. Enter interface configuration mode for the access ports: Prepares the specific ports where PortFast and BPDU Guard are applied. 4. Enable PortFast on the interfaces: Allows immediate transition to forwarding state, bypassing listening/learning phases. 5. Enable BPDU Guard on the interfaces: Protects the network by err-disabling the port if a BPDU is received, which should occur only after PortFast is enabled on access ports.

Question 2

What problem is HSRP designed to solve?

Accepted Answer

Loss of the default gateway if one router fails. HSRP provides a virtual default gateway so hosts continue forwarding traffic even if one physical gateway router fails.

Answer

Layer 2 switching loops

Answer

Duplicate MAC addresses on trunks

Answer

Wireless interference

Question 3

A trunk link between two switches is up, but hosts in VLAN 30 on opposite switches cannot communicate. VLAN 10 works across the same trunk. Which two causes are the most likely?

Accepted Answer

VLAN 30 is not allowed on the trunk on one side. When one VLAN fails but others work across the same trunk, the problem is likely VLAN-specific. VLAN 30 may not exist on one switch or may not be allowed on the trunk. Option C is incorrect because the native VLAN does not need to be 30; a native VLAN mismatch would typically cause connectivity issues on all VLANs, not just VLAN 30. Option D is incorrect because PortFast only affects the speed at which an access port enters the forwarding state and does not impact communication across an already-up trunk.

Answer

The trunk native VLAN should always be 30

Answer

PortFast must be disabled on the access ports in VLAN 30

Question 4

A branch router is acting as a DHCP server. Which two parameters can it provide directly to clients through DHCP?

Accepted Answer

Default gateway. DHCP (Dynamic Host Configuration Protocol) is designed to automatically assign IP configuration parameters to clients. The default gateway (option 3) and DNS server address (option 6) are standard DHCP options defined in RFC 2132, which a router acting as a DHCP server can directly provide to clients to enable network connectivity and name resolution.

Answer

OSPF area number

Answer

Switch port duplex setting

Answer

STP root bridge priority

Question 5

Drag and drop the following steps into the correct order to configure gRPC streaming telemetry subscription on a Cisco IOS-XE device, from initial setup to data collection.

Accepted Answer

Enter global configuration mode, enable telemetry, define subscription with encoding and filter, specify receiver, verify data collection.. The correct order starts with entering global config, then enabling telemetry, defining subscription details (encoding and filter), specifying the receiver, and finally verifying data collection.

Answer

Enable telemetry, define subscription, specify receiver, enter global config, verify data collection.

Answer

Define subscription with encoding and filter, enable telemetry, specify receiver, enter global config, verify data collection.

Answer

Specify receiver, define subscription, enable telemetry, enter global config, verify data collection.

Question 6

Drag and drop the following troubleshooting steps into the correct order to diagnose a client connectivity issue using the OSI bottom-up method.

Accepted Answer

Check physical connectivity, then data link, then network, then transport, then application. The OSI bottom-up method starts at physical layer and moves up. This ensures that lower-layer issues are resolved before higher-layer troubleshooting, preventing wasted effort on symptoms caused by underlying problems.

Answer

Check application, then transport, then network, then data link, then physical

Answer

Check network, then data link, then physical, then transport, then application

Answer

Check physical, then network, then data link, then transport, then application

Question 7

Which three statements about Power over Ethernet (PoE) and PoE+ standards are correct? (Choose three.)

Accepted Answer

Powered devices (PDs) can negotiate power requirements using Link Layer Discovery Protocol (LLDP) with PoE extensions.. Option 1 is correct because the IEEE 802.3af PoE standard specifies a maximum power delivery of 15.4 watts per port at the PSE (Power Sourcing Equipment), with a minimum of 12.95 watts guaranteed at the PD (Powered Device) after cable losses. Option 2 is correct because the IEEE 802.3at PoE+ standard increases the maximum power per port to 30 watts at the PSE, with 25.5 watts available at the PD. Option 4 is correct because PDs can negotiate power requirements using LLDP with the IEEE 802.1AB LLDP-MED (Media Endpoint Discovery) extensions, which include PoE TLV (Type-Length-Value) fields for power negotiation beyond the simple classification method. Option 3 (both PoE and PoE+ use the same four pairs) is incorrect because both standards deliver power over only two pairs (spare or data pairs depending on mode); four-pair power delivery is introduced in IEEE 802.3bt (PoE++). Option 5 (PoE+ requires Category 3 cabling) is incorrect because PoE+ requires at least Category 5e cabling to support the higher power levels without excessive heat or signal degradation. Option 6 (PoE automatically disables power if a non-PoE device is detected) is incorrect because the PSE first performs a detection phase to identify a valid PoE signature; if none is found, power is never applied—so it is not disabled after being enabled.

Answer

PoE+ requires Category 3 cabling or better.

Answer

PoE automatically disables power if a non-PoE device is detected.

Answer

Both PoE and PoE+ use the same four pairs of a twisted-pair cable for power delivery.

Question 8

Drag and drop the route types on the left to the correct administrative distance and use case descriptions on the right.

Accepted Answer

Connected routes: AD 0, directly connected networks. All the given pairings are correct. Connected routes use AD 0 because they are directly connected. Static routes use AD 1 as they are manually configured. EIGRP internal routes have AD 90, and OSPF routes have AD 110; both are IGPs used for routing within the same autonomous system.

Question 9

After configuring a trunk port to allow VLAN 40, a technician finds that VLAN 40 is not listed among the VLANs in spanning tree forwarding state in the show interfaces trunk output. What is the most likely cause?

Accepted Answer

VLAN 40 has not been created in the VLAN database on the switch.. VLAN 40 must exist in the local VLAN database before it can participate in spanning tree on a trunk port. Even if the trunk is configured to allow VLAN 40, if the VLAN has not been created on the switch, the spanning tree protocol will not place it in a forwarding state. The 'show interfaces trunk' output will list only VLANs that are both allowed and existent, so the absence of VLAN 40 in the forwarding state indicates it was never created.

Answer

The trunk port is using ISL encapsulation, which does not support VLAN 40.

Answer

The technician omitted the 'add' keyword when adding VLAN 40 to the allowed list, so the trunk no longer permits VLAN 40.

Answer

VTP pruning is enabled, and VLAN 40 is not needed by any downstream neighbor, so it is pruned from this trunk.

Question 10

A technician is troubleshooting a dual-stack network where an IPv6-only host cannot reach an IPv4 resource. The technician issues the show ipv6 interface brief command on the local router and notices the interface facing the host has a link-local address but no global unicast address. The technician then checks the running configuration and finds that the command ipv6 unicast-routing is missing. What is the most likely cause?

Accepted Answer

IPv6 unicast routing has not been enabled on the router.. The missing `ipv6 unicast-routing` command means the router is not acting as an IPv6 router, so it does not send Router Advertisement (RA) messages. Without RAs, the host cannot autoconfigure a global unicast address or learn a default gateway, breaking IPv6 connectivity to any IPv4 resource even if NAT64 is present.

Answer

An IPv6 access list on the router is blocking Router Advertisement messages.

Answer

The IPv4 resource is not configured for NAT64 translation.

Answer

The host has an incorrect default gateway for IPv6.

Question 11

Drag and drop the protocols/technologies on the left to the descriptions on the right.

Accepted Answer

SSH: Provides secure remote access to network devices using encryption, typically on TCP port 22.. SSH (Secure Shell) provides encrypted remote access to network devices, typically using TCP port 22. It is the secure alternative to Telnet. Telnet (port 23) is unencrypted and insecure. HTTP (port 80) is used for web traffic, not remote access. FTP (port 21) is for file transfers and is not designed for remote shell access. Therefore, only SSH matches the description of secure remote access.

Answer

Telnet: Provides secure remote access to network devices using encryption, typically on TCP port 23.

Answer

HTTP: Provides secure remote access to network devices using encryption, typically on TCP port 80.

Answer

FTP: Provides secure remote access to network devices using encryption, typically on TCP port 21.

Question 12

Drag and drop the following steps into the correct order to configure Rapid PVST+ with a designated root bridge, PortFast, and BPDU Guard on access ports.

Drag or tap steps into the slots.

Steps

Order

1Step 1

2Step 2

3Step 3

4Step 4

5Step 5

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Enter global configuration mode, exclude addresses, create the DHCP pool, configure the network and default gateway, enable DHCP relay on the required interface, and verify.. The correct order for configuring a Cisco IOS-XE router as a DHCP server and relay agent is: first exclude addresses to prevent the DHCP server from leasing reserved IPs, then create and configure the DHCP pool (network, default gateway), next enable DHCP relay on the required interface, and finally verify. Only Option D follows this sequence exactly. Options A, B, and C are incorrect because they either place exclusion after pool creation (A) or enable relay before the pool is fully configured (B and C), which can lead to address conflicts or forwarding issues.

Answer

Enter global configuration mode, create the DHCP pool, configure the network and default gateway, exclude addresses, enable DHCP relay on the required interface, and verify.

Answer

Enter global configuration mode, enable DHCP relay on the required interface, create the DHCP pool, configure the network and default gateway, exclude addresses, and verify.

Answer

Enter global configuration mode, create the DHCP pool, enable DHCP relay on the required interface, configure the network and default gateway, exclude addresses, and verify.

Question 13

Drag and drop the following steps into the correct order to configure and recover from a BPDU guard violation on a PortFast-enabled access port.

Accepted Answer

Configure PortFast and BPDU guard on the interface.. The correct order is: first configure PortFast and BPDU guard on the interface (A). Then connect a switch to trigger a BPDU guard violation (B). Next, perform a shutdown followed by no shutdown to recover from the errdisable state (C). Finally, verify that the port is forwarding traffic (D). This sequence ensures the violation occurs before recovery, which is the realistic scenario.

Question 14

A junior network engineer is configuring a new Windows 10 workstation to connect to the corporate network. The network uses a /24 subnet mask and has a default gateway of 192.168.1.1. The workstation obtains its IP address automatically from a DHCP server, but the engineer needs to manually set a static IPv4 address of 192.168.1.50 and ensure the workstation can reach the internet. Which configuration step must the engineer take to satisfy these requirements?

Accepted Answer

Set the subnet mask to 255.255.255.0 and the default gateway to 192.168.1.1. A /24 subnet mask (255.255.255.0) matches the network prefix of the default gateway 192.168.1.1, ensuring the workstation can route traffic to the internet via that gateway. Option A fails because a /16 mask (255.255.0.0) does not match the corporate /24 network, causing incorrect network identification and potential routing issues. Option C fails because leaving the default gateway blank means the host cannot reach any network beyond its local subnet, so internet access is impossible. Option D fails because using the host's own IP (192.168.1.50) as the default gateway would cause the host to attempt to route traffic to itself, never reaching the actual gateway.

Answer

Set the subnet mask to 255.255.0.0 and the default gateway to 192.168.1.1

Answer

Set the subnet mask to 255.255.255.0 and leave the default gateway blank

Answer

Set the subnet mask to 255.255.255.0 and the default gateway to 192.168.1.50

Question 15

Drag and drop the following steps into the correct order to configure Rapid PVST+ with a designated root bridge, PortFast, and BPDU Guard on access ports.

Drag or tap steps into the slots.

Steps

Order

1Step 1

2Step 2

3Step 3

4Step 4

5Step 5

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Send GET request to retrieve current interface configuration. The correct order for a RESTCONF GET request workflow is: first, send a GET request to retrieve the current interface configuration. Second, analyze the JSON/XML response to identify required changes. Third, create the updated configuration payload in JSON or XML format. Finally, apply the configuration change using a PUT or PATCH request. This sequence ensures you read the existing state before modifying it.