CCNA Practice Test 44 — 15 Questions

Question 1

Drag and drop the following steps into the correct order to configure a Cisco IOS-XE router as a DHCP server for a local subnet and enable a DHCP relay agent on a different interface to forward client requests to that server.

Accepted Answer

Configure the DHCP server on the local subnet, then configure the DHCP relay agent on the remote interface, and finally verify both server and relay functionality.. The DHCP server must be configured first on the local subnet, then the relay agent on the remote interface to forward requests; verification ensures both server and relay function correctly.

Answer

Configure the DHCP relay agent on the remote interface, then configure the DHCP server on the local subnet, and finally verify both server and relay functionality.

Answer

Configure the DHCP server on the local subnet, then verify functionality, and finally configure the DHCP relay agent on the remote interface.

Answer

Configure the DHCP relay agent on the remote interface, then verify functionality, and finally configure the DHCP server on the local subnet.

Question 2

You are connected to R1 via the console. SNMP v2c community strings (public RO, private RW) are already configured. The network has a management server at 10.1.1.100 and a NetFlow collector at 10.1.1.200. Configure SNMP traps to the management server for link status changes. Also configure NetFlow on interface GigabitEthernet0/0 to export version 9 to the collector, with a source interface of Loopback0 (10.255.255.1/32).

Accepted Answer

snmp-server host 10.1.1.100 version 2c public
snmp-server enable traps snmp linkdown linkup
ip flow-export destination 10.1.1.200 2055
ip flow-export version 9
ip flow-export source Loopback0
interface GigabitEthernet0/0
 ip flow ingress. The current configuration has SNMP community strings but lacks trap destinations and NetFlow export. To fix, you must configure snmp-server host 10.1.1.100 version 2c public to send traps, and snmp-server enable traps snmp linkdown linkup is required to send link status changes. For NetFlow, you need ip flow-export destination 10.1.1.200 2055 and then ip flow-export version 9 to set the export version. Also configure ip flow-export source Loopback0 and apply ip flow ingress on GigabitEthernet0/0. Verification commands confirm the settings.

Answer

snmp-server host 10.1.1.200 version 2c private
snmp-server enable traps
ip flow-export destination 10.1.1.100 2055 version 9
ip flow-export source Loopback0
interface GigabitEthernet0/0
 ip flow egress

Answer

snmp-server host 10.1.1.100 version 2c private
snmp-server enable traps
ip flow-export destination 10.1.1.200 2055 version 9
ip flow-export source Loopback0
interface GigabitEthernet0/0
 ip flow ingress

Answer

snmp-server host 10.1.1.100 version 2c public
snmp-server enable traps snmp linkdown linkup
ip flow-export destination 10.1.1.200 2055 version 5
ip flow-export source Loopback0
interface GigabitEthernet0/0
 ip flow ingress

Question 3

Exhibit: A user can ping 8.8.8.8 successfully but cannot browse to www.example.com by name. Which service is the most likely failing component?

Accepted Answer

DNS. If connectivity to an IP address works but name-based access fails, the path is up and the problem is usually name resolution. DNS is the service that translates hostnames into IP addresses.

Answer

NTP

Answer

Syslog

Answer

CDP

Question 4

Which TWO statements accurately describe how AI/ML concepts are applied to network operations in modern enterprise networks?

Accepted Answer

Supervised machine learning models can be used to classify network traffic into predefined categories, such as identifying whether traffic is voice, video, or data.. Supervised learning uses labeled data to classify traffic (e.g., voice, video, data). Option B is correct because anomaly detection often uses unsupervised learning to identify deviations from normal behavior. Option C is wrong because reinforcement learning is not used for spam classification; that task uses supervised learning. Option D is wrong because clustering groups data but cannot predict exact bandwidth usage; prediction requires regression models. Option E is wrong because predictive analytics in network operations leverages machine learning models, not solely static thresholds defined by administrators.

Answer

Reinforcement learning is primarily used to automatically classify email traffic as spam or not spam based on a labeled dataset.

Answer

Clustering algorithms, a type of unsupervised learning, are used to predict the exact bandwidth usage of a specific application over the next hour.

Answer

Predictive analytics in network operations relies solely on static thresholds defined by network administrators to forecast potential failures.

Question 5

You are connected to SW1. Configure an LACP EtherChannel between SW1 and SW2 using interfaces GigabitEthernet0/1 and GigabitEthernet0/2. The port-channel interface must be configured as a trunk allowing VLANs 10, 20, and 30. Currently, the channel is not forming due to a mismatch in speed/duplex and VLAN configuration on SW2. Troubleshoot and resolve the issue so that the EtherChannel comes up as a Layer 2 trunk.

Accepted Answer

On SW2, configure interfaces GigabitEthernet0/1 and 0/2 with speed 1000, duplex full, and on the port-channel interface, set allowed VLANs to 10,20,30.. The EtherChannel is not forming because SW2's interfaces have speed 100 and duplex half, while SW1's interfaces have speed 1000 and duplex full. Additionally, the allowed VLANs on SW2's trunk must include VLAN 30, and this should be configured on the port-channel interface, not the physical interfaces. To fix, on SW2, set the speed to 1000 and duplex to full on Gi0/1 and Gi0/2, then on the port-channel interface, configure allowed VLANs 10,20,30. After these changes, the channel will come up as a Layer 2 trunk.

Answer

On SW2, configure interfaces GigabitEthernet0/1 and 0/2 with speed 100, duplex half, and on the port-channel interface, set allowed VLANs to 10,20,30.

Answer

On SW2, configure interfaces GigabitEthernet0/1 and 0/2 with speed 1000, duplex full, and on the port-channel interface, set allowed VLANs to 10,20.

Answer

On SW2, configure interfaces GigabitEthernet0/1 and 0/2 with speed 1000, duplex full, and on the port-channel interface, set allowed VLANs to 1-4094.

Question 6

A host address is 172.16.8.70/26. What is the network address of its subnet?

Accepted Answer

172.16.8.64. A /26 uses blocks of 64 addresses. In plain language, the fourth-octet subnet ranges are 0–63, 64–127, 128–191, and 192–255. Since the host address ends in 70, it belongs to the 64–127 block. That means the network address of the subnet is 172.16.8.64.

This is a standard subnetting calculation. The key is to identify the correct block based on the prefix and then choose the first address in that block as the network address.

Answer

172.16.8.0

Answer

172.16.8.70

Answer

172.16.8.128

Question 7

You are connected to R1, a multilayer switch acting as a DNS client and DNS server for the local network. The network uses 192.168.1.0/24 for internal hosts. Users report that hostnames like 'server1.example.com' fail to resolve. Diagnose and fix the DNS resolution issue using nslookup and dig. Ensure that R1 can resolve both forward and reverse DNS queries correctly.

Accepted Answer

Configure R1 as a local DNS server with an A record for server1.example.com (192.168.1.10) and a PTR record for 192.168.1.10, then remove the unreachable forwarder 192.0.2.53 and ensure ip domain lookup uses the local server.. The issue is twofold: first, the DNS forwarder (192.0.2.53) is unreachable, causing forward lookups to fail with NXDOMAIN; second, there is no PTR record for the reverse lookup zone. The forward lookup failure is because R1 is configured to use an unreachable external DNS server. The reverse lookup failure is because no PTR record exists for the host IP. To fix, either configure a reachable DNS forwarder or enable local DNS server with appropriate records. Here, we configure R1 as a local DNS server with an A record for 'server1.example.com' pointing to 192.168.1.10 and a PTR record for the reverse lookup. Then we remove the unreachable forwarder and ensure ip domain lookup uses local server.

Answer

Configure R1 as a DNS server with only an A record for server1.example.com (192.168.1.10) and keep the forwarder 192.0.2.53 for other queries.

Answer

Remove the forwarder 192.0.2.53 and configure R1 as a DNS server with only a PTR record for 192.168.1.10.

Answer

Change the DNS forwarder to a reachable server like 8.8.8.8 and add a PTR record for 192.168.1.10 on R1.

Question 8

Drag and drop the following steps into the correct order to configure Root Guard on a designated port, Loop Guard on a non-designated port, and BPDU Guard on a PortFast port, along with the recovery steps when a port enters err-disabled state.

Accepted Answer

1. Enter global configuration mode. 2. Configure Root Guard on the designated port. 3. Configure Loop Guard on the non-designated port. 4. Configure BPDU Guard on the PortFast-enabled port. 5. Configure errdisable recovery for BPDU Guard.. The order follows the logical sequence: enter config mode, then configure each guard feature on its respective port, and finally set the errdisable recovery to automatically re-enable ports after a BPDU Guard violation.

Answer

1. Enter global configuration mode. 2. Configure BPDU Guard on the PortFast-enabled port. 3. Configure Root Guard on the designated port. 4. Configure Loop Guard on the non-designated port. 5. Configure errdisable recovery for BPDU Guard.

Answer

1. Enter global configuration mode. 2. Configure Loop Guard on the non-designated port. 3. Configure Root Guard on the designated port. 4. Configure BPDU Guard on the PortFast-enabled port. 5. Configure errdisable recovery for BPDU Guard.

Answer

1. Enter global configuration mode. 2. Configure Root Guard on the designated port. 3. Configure BPDU Guard on the PortFast-enabled port. 4. Configure Loop Guard on the non-designated port. 5. Configure errdisable recovery for BPDU Guard.

Question 9

You are connected to a single switch, SW1, which is a Cisco Catalyst 2960 running Cisco IOS. Configure port GigabitEthernet0/1 as an access port for a Cisco IP phone and a PC on the same VLAN (Voice VLAN 20, Data VLAN 10). The switch must provide PoE to the phone. Additionally, configure GigabitEthernet0/2 as an access port for a wireless access point (AP) that requires PoE. Verify both configurations using the appropriate show commands. The current running-config is incomplete; you must add the necessary commands.

Accepted Answer

interface GigabitEthernet0/1
 switchport mode access
 switchport access vlan 10
 switchport voice vlan 20
 power inline auto
interface GigabitEthernet0/2
 switchport mode access
 switchport access vlan 10
 power inline auto. The configuration was missing the voice VLAN assignment on Gi0/1 and PoE settings on both ports. For Gi0/1, the command 'switchport voice vlan 20' is required to separate voice traffic from data traffic. For both Gi0/1 and Gi0/2, PoE must be enabled; by default 'power inline auto' is set, but since the ports show 'off', they may have been disabled. The solution ensures PoE is enabled with 'power inline auto' and sets the voice VLAN correctly. Verification with 'show interfaces switchport' should show 'Voice VLAN: 20' and 'show power inline' should show 'auto' for both ports.

Answer

interface GigabitEthernet0/1
 switchport mode trunk
 switchport trunk allowed vlan 10,20
 power inline auto
interface GigabitEthernet0/2
 switchport mode access
 switchport access vlan 10
 power inline auto

Answer

interface GigabitEthernet0/1
 switchport mode access
 switchport access vlan 10
 switchport voice vlan 20
 power inline never
interface GigabitEthernet0/2
 switchport mode access
 switchport access vlan 10
 power inline auto

Answer

interface GigabitEthernet0/1
 switchport mode access
 switchport access vlan 20
 switchport voice vlan 10
 power inline auto
interface GigabitEthernet0/2
 switchport mode access
 switchport access vlan 10
 power inline auto

Question 10

You are connected to R1. The inside network 192.168.1.0/24 must be translated to the outside interface IP (198.51.100.1) using PAT (NAT overload). Additionally, a static NAT entry must map host 192.168.1.10 to 203.0.113.10. The current configuration is incomplete and contains errors. Correct the configuration so that both translations work properly.

Accepted Answer

interface GigabitEthernet0/1
ip nat outside
!
access-list 1 permit 192.168.1.0 0.0.0.255
!
ip nat inside source list 1 interface GigabitEthernet0/1 overload
ip nat inside source static 192.168.1.10 203.0.113.10. The configuration has three issues: 1) GigabitEthernet0/1 is incorrectly set as 'ip nat inside' instead of 'ip nat outside'. 2) The PAT command is missing the 'overload' keyword. 3) Access-list 1 permits 10.0.0.0/8, not the inside subnet 192.168.1.0/24. The commands fix these: change the interface to 'ip nat outside', add 'overload' to the PAT command, and update the ACL to permit the correct inside network.

Answer

interface GigabitEthernet0/1
ip nat inside
!
access-list 1 permit 192.168.1.0 0.0.0.255
!
ip nat inside source list 1 interface GigabitEthernet0/1 overload
ip nat inside source static 192.168.1.10 203.0.113.10

Answer

interface GigabitEthernet0/1
ip nat outside
!
access-list 1 permit 10.0.0.0 0.255.255.255
!
ip nat inside source list 1 interface GigabitEthernet0/1
ip nat inside source static 192.168.1.10 203.0.113.10

Answer

interface GigabitEthernet0/1
ip nat outside
!
access-list 1 permit 192.168.1.0 0.0.0.255
!
ip nat inside source list 1 interface GigabitEthernet0/1 overload
ip nat inside source static tcp 192.168.1.10 80 203.0.113.10 80

Question 11

Users can reach a server by IP address but not by hostname. Which service should be checked first?

Accepted Answer

DNS. If the server is reachable by IP but not by name, the likely issue is name resolution, which points to DNS.

Answer

NTP

Answer

QoS

Answer

HSRP

Question 12

A network administrator receives a call from a user who cannot access any external websites from their wired workstation. The user can ping the default gateway successfully, but fails to ping 8.8.8.8. The administrator runs ipconfig /all on the workstation and sees an IP address of 192.168.1.50, subnet mask 255.255.255.0, and default gateway 192.168.1.1. What is the most likely cause of this issue?

Accepted Answer

The workstation has an incorrect default gateway configured.. The user can successfully ping 192.168.1.1, proving local IP connectivity to that device. However, the device at 192.168.1.1 may not be the correct default gateway for reaching external networks; the actual gateway router might be at a different IP (e.g., 192.168.1.254). This misconfiguration explains why pings to 8.8.8.8 fail even though the local gateway responds, as the workstation sends external traffic to the wrong next-hop address.

Answer

The workstation has a duplicate IP address on the network.

Answer

The workstation is connected to the wrong VLAN.

Answer

The workstation has a DNS misconfiguration.

Question 13

R1 learns three OSPF routes to different destinations:

O 10.10.10.0/24
O IA 10.20.20.0/24
O E2 10.30.30.0/24

Which statement is correct about these route types?

Accepted Answer

O E2 is an OSPF external type 2 route.. An O route is intra-area, O IA is interarea, and O E2 is an external type 2 route redistributed into OSPF. The codes describe route origin, not just preference. CCNA expects you to identify them quickly when reading the routing table.

Answer

O IA is an external route redistributed from another routing protocol.

Answer

O means the route was learned through EIGRP.

Answer

All three routes were learned from the same OSPF area type.

Question 14

Refer to the exhibit. A network administrator is troubleshooting connectivity to devices in VLAN 10 on a Layer 3 switch. The administrator issues the show ip interface brief command on SW1 and sees the output displayed. What is the most likely reason that the VLAN 10 SVI is not functioning?

Accepted Answer

No active ports are assigned to VLAN 10.. The VLAN 10 SVI will remain in a down/down state if there are no active ports assigned to VLAN 10, because a Layer 3 switch requires at least one active Layer 2 interface in the VLAN to bring the SVI up. This is a fundamental behavior of Cisco switches: the SVI is operationally down until the VLAN has at least one active port in a non-blocking state. The show ip interface brief output would show the VLAN10 interface as 'down/down' rather than 'administratively down' or 'up/up'.

Answer

The VLAN 10 SVI has been administratively shut down.

Answer

The IP address configured on the VLAN 10 SVI is incorrect for the subnet.

Answer

The switch ports assigned to VLAN 10 are all configured as trunk ports.

Question 15

Which TWO statements correctly describe the OSI model layers and their corresponding PDU names during encapsulation?

Accepted Answer

The Transport layer encapsulates data into segments.. Both A and B are correct. During encapsulation, the Transport layer (Layer 4) adds a header to upper-layer data to form segments, and the Network layer (Layer 3) encapsulates those segments into packets by adding a network-layer header (e.g., IP). Option C is incorrect because the Data Link layer encapsulates packets into frames, not bits; bits are the raw transmission unit at the Physical layer. Option D is incorrect because the Session layer manages sessions but does not produce a PDU called 'sessions'; encapsulation of segments only occurs at Layers 4 and below. Option E is incorrect because the Physical layer transmits frames as bits but does not perform encapsulation; encapsulation ends at the Data Link layer.

Answer

The Data Link layer encapsulates packets into bits.

Answer

The Session layer encapsulates segments into sessions.

Answer

The Physical layer encapsulates frames into bits.