CCNA Practice Test 48 — 15 Questions

Question 1

SW2 receives the following STP details for VLAN 10: The root bridge ID is 32768:0001.0001.0001 (SW1), and SW2's bridge ID is 32768:0002.0002.0002. Its interface Gi0/1 has a path cost of 4 to the root, while Gi0/2 has a path cost of 19. Based on this information, which statement is correct?

Accepted Answer

Gi0/1 on SW2 is the root port.. The root bridge has the lowest bridge ID. SW1 is the root because its bridge ID is lower than SW2's local bridge ID. On a non-root switch, the port with the best path toward the root becomes the root port, so Gi0/1 is the root port here.

Answer

SW2 is the root bridge for VLAN 10.

Answer

All SW2 ports in VLAN 10 must be designated ports.

Answer

STP is disabled because the priorities are equal.

Question 2

Two switches are connected with EtherChannel using LACP. One side is configured with mode active and the other side with mode passive. What happens?

Accepted Answer

The channel forms successfully. LACP forms an EtherChannel when at least one side actively negotiates. Active plus passive is a valid combination, so the bundle comes up if the physical settings match.

Answer

The channel stays down because both sides must be active

Answer

The channel forms only if PAgP is also enabled

Answer

The channel becomes a static Port-Channel

Question 3

Based on the exhibit, why are clients in VLAN 70 failing to resolve hostnames even though they can reach remote IP addresses?

Accepted Answer

The clients are missing valid DNS server information.. The strongest explanation is that the clients are missing valid DNS server information. In practical terms, successful reachability to remote IP addresses proves that Layer 3 forwarding is working. The failure occurs only when a hostname is used, which points to a naming service problem rather than a general connectivity problem. The DHCP scope shown provides an address and default gateway, but no DNS server option is defined.

This is a very realistic IP-services troubleshooting pattern because the network path works while application usability still fails.

Answer

The default gateway must be removed from the DHCP scope.

Answer

The clients must use PPP before DNS works.

Answer

The VLAN must be converted to the native VLAN on all trunks.

Question 4

Users on a new access switch can reach devices in their own VLAN but cannot reach the default gateway on the distribution switch. Based on the exhibit, what is the most likely cause?

Accepted Answer

VLAN 30 is missing from the allowed VLAN list on the trunk.. The trunk allows only VLANs 10 and 20, so VLAN 30 traffic never crosses the uplink. Local switching inside VLAN 30 on the access switch can still work, which is why same-VLAN communication succeeds. Adding VLAN 30 to the allowed list is the direct fix.

Answer

The user ports should be configured as trunks.

Answer

The SVI for VLAN 30 must be shutdown for inter-VLAN routing to work.

Answer

The trunk native VLAN must be changed to VLAN 30.

Question 5

What problem do first-hop redundancy protocols such as HSRP solve?

Accepted Answer

They provide a backup default gateway for end hosts. First-hop redundancy protocols allow hosts to use a virtual default gateway that can remain available even if one physical router fails.

Answer

They prevent duplicate MAC addresses on a LAN

Answer

They replace spanning tree on switched networks

Answer

They encrypt traffic between users and the default gateway

Question 6

Which data format is most commonly used in REST APIs because it is lightweight and easy for applications to parse?

Accepted Answer

JSON. JSON is widely used with REST because it is compact, human-readable, and easy for software to parse. It is common in controller APIs and automation workflows.

Answer

YANG

Answer

STP

Answer

TFTP

Question 7

Which OSPF neighbor state indicates that the routers have already exchanged full link-state databases?

Accepted Answer

FULL. FULL means the adjacency is complete and database synchronization has finished. States such as INIT, 2-WAY, EXSTART, and EXCHANGE all occur earlier in the process.

Answer

2-WAY

Answer

EXSTART

Answer

INIT

Question 8

Which two statements accurately describe why NTP and Syslog are often configured together?

Accepted Answer

Syslog provides event visibility, while NTP helps keep timestamps consistent across devices.. NTP and Syslog are often configured together because logs become much more useful when the device clocks are aligned. In practical terms, Syslog provides the event messages, while NTP helps ensure that the timestamps on those messages are consistent across the environment. That makes troubleshooting and incident analysis more reliable.

This is a very practical operations concept and comes up often in real troubleshooting workflows.

Answer

NTP replaces the need for any event logging.

Answer

Syslog automatically assigns the NTP server address to all devices.

Answer

Both services can be used only on routers, not switches.

Question 9

A DHCP server is located on a different VLAN from the clients. Which feature is required so the clients can still receive addresses?

Accepted Answer

DHCP relay. DHCP relay forwards client broadcasts to a remote server as unicast, typically using ip helper-address on the Layer 3 interface.

Answer

DHCP snooping

Answer

Port security

Answer

NAT overload

Question 10

Why might voice traffic be placed in a priority queue on a WAN link?

Accepted Answer

To reduce delay and jitter for time-sensitive traffic. Voice traffic is delay-sensitive. Prioritization helps reduce queuing delay and jitter so real-time audio remains intelligible.

Answer

To increase the TTL value of voice packets

Answer

To change RTP into TCP for reliability

Answer

To avoid assigning IP addresses to phones

Question 11

A client on VLAN 20 must obtain an IPv4 lease from a DHCP server located on VLAN 100. Which feature is required on the Layer 3 interface for VLAN 20?

Accepted Answer

DHCP relay. A DHCP relay agent forwards client broadcasts as unicast to the remote server, typically using ip helper-address.

Answer

NAT overload

Answer

Port security

Answer

Private VLAN

Question 12

A router performing PAT is using a single public IPv4 address for many inside hosts. Which value most often distinguishes one inside flow from another on the same outside address?

Accepted Answer

TCP or UDP source port. PAT commonly multiplexes sessions by translating Layer 4 source port numbers.

Answer

TTL

Answer

DSCP

Answer

MAC address of the host

Question 13

Which term in the CIA triad refers to ensuring systems and data remain accessible when needed?

Accepted Answer

Availability. The term is availability. In plain language, availability means that authorized users should be able to reach systems, services, and data when they actually need them. If a service is down, overwhelmed, or otherwise unreachable, availability has been affected. This is different from confidentiality, which focuses on preventing unauthorized disclosure, and integrity, which focuses on preventing unauthorized change.

This distinction matters because the CIA triad appears often in security foundations and exam questions. Availability is not about whether data is secret or whether it has been altered; it is about whether the service is usable. That is why availability is the best answer here.

Answer

Integrity

Answer

Accounting

Answer

Confidentiality

Question 14

Which two statements accurately describe a controller-based WLAN compared with a set of independently managed APs?

Accepted Answer

It centralizes management and policy across multiple access points.. A controller-based WLAN centralizes operational control and helps apply policies more consistently across many APs. In practical terms, this improves scalability and reduces the burden of touching each AP individually when changes are needed. The APs still provide the radio service, but they are coordinated under a shared management model.

This question is about architecture, not about claiming that a controller replaces APs or that it removes all other network services.

Answer

It removes the need for access points entirely.

Answer

It replaces the need for DHCP on all client devices.

Answer

It is the same thing as WPA3.

Question 15

Which two statements accurately describe ACL behavior on Cisco devices?

Accepted Answer

ACL entries are processed from top to bottom until a match is found.. ACL questions often depend on understanding how Cisco devices process entries line by line. In plain language, ACL entries are evaluated from top to bottom, and the first matching statement decides the result. If traffic reaches the end without matching a permit, it is denied by the implicit deny. These two ideas explain many real ACL troubleshooting cases.

The wrong answers often sound plausible because they borrow language from other parts of networking. But ACLs do not normally evaluate all lines before choosing, and they do not end with an implicit permit. Once you remember “first match wins” and “implicit deny at the end,” many access-list questions become much easier.

Answer

ACLs always evaluate every line before deciding the action.

Answer

ACLs end with an implicit permit unless configured otherwise.

Answer

ACLs apply only to Layer 1 traffic and not IP packets.

CCNA Practice Test 48 — 15 Questions

Exhibit

CCNA Practice Test 48 — 15 Questions

Exhibit