CCNA Practice Test 5 — 10 Questions

Question 1

A network administrator configured dynamic NAT on a Cisco router to allow internal hosts to access the internet. After the configuration, users report that they can access some websites but not others. The administrator checks the router and discovers that the NAT translation table is full, and new connection attempts are being dropped. What is the most likely cause of this issue?

Accepted Answer

The NAT pool is exhausted; configure PAT to allow multiple hosts to share a single public IP.. When the NAT pool is exhausted, no new translations can be created, so only hosts that already have established translations can continue to communicate, causing intermittent connectivity. A full NAT table means the pool of public IP addresses is completely allocated, preventing new sessions. Implementing PAT allows multiple inside hosts to share a single public IP by multiplexing port numbers, resolving the pool exhaustion.

Answer

The inside local addresses are not properly defined in the access list.

Answer

The outside interface is not configured with the ip nat outside command.

Answer

The inside interface is not configured with the ip nat inside command.

Question 2

R1 and R2 are directly connected. Both are configured in OSPF area 0, and they can successfully ping each other. However, OSPF neighbor adjacency fails. R1's interface is configured with `ip ospf authentication message-digest` and a valid key, while R2's interface has no OSPF authentication configured. What is the most likely cause?

Accepted Answer

The OSPF authentication settings do not match.. The most likely cause is an OSPF authentication mismatch. Although the routers have IP connectivity and are in the same OSPF area, OSPF adjacency requires matching security parameters. R1 uses message-digest authentication whereas R2 has none configured, preventing neighbor formation. The other options are incorrect: the stem confirms they are in the same area (A), OSPF does not require identical hostnames (C), and successful pings prove the subnet mask does not block multicast traffic (D).

Answer

The routers are in different OSPF areas.

Answer

The routers need identical hostnames before adjacency can form.

Answer

The subnet mask prevents OSPF multicast traffic.

Question 3

Drag and drop the following steps into the correct order to capture and analyze traffic on IOS-XE using the embedded packet capture feature, then export the capture for analysis in Wireshark to isolate a Layer 2 or Layer 3 fault.

Accepted Answer

Define the capture point specifying the interface and direction (monitor capture point command). Embedded Packet Capture (EPC) on IOS-XE uses exec-mode monitor capture commands without needing global configuration mode. First, define the capture point specifying the interface and direction. Then start the capture to collect packets. Stop the capture after gathering sufficient data, and finally export the file to a TFTP server for analysis in Wireshark.

Question 4

Drag and drop the following steps into the correct order to configure OSPFv3 for IPv6 on a Cisco IOS-XE router.

Accepted Answer

Enable IPv6 routing globally with 'ipv6 unicast-routing'. To configure OSPFv3 for IPv6, first enable IPv6 routing globally with 'ipv6 unicast-routing'. Next, enter OSPFv3 configuration mode using 'router ospfv3 1' to set process parameters. Then, apply OSPFv3 on each interface with 'ipv6 ospf area '. Finally, verify adjacencies with 'show ipv6 ospf neighbor'.

Question 5

Match each security concept to its most accurate meaning.

Accepted Answer

Phishing: A social engineering attack that tricks users into revealing sensitive information such as usernames and passwords.. Confidentiality ensures data is not disclosed to unauthorized parties; integrity prevents unauthorized modification of data; availability guarantees systems and data are accessible when needed; least privilege limits access rights to the minimum necessary. The correct matches reflect these core security principles.

Answer

Phishing: A type of malware that encrypts files and demands payment for decryption.

Answer

Phishing: An attack that overwhelms a network with traffic to disrupt services.

Answer

Phishing: An attack that intercepts communications between two parties to steal data.

Question 6

R1 learns the route 192.0.2.0/24 via OSPF, RIP, and a static route configured with an administrative distance of 130. Based on this information, which two statements are correct?

Accepted Answer

The OSPF route is installed because its administrative distance is lower than RIP and the floating static route.. The router installs the OSPF route because it has the lowest administrative distance among the routes shown. The static route with AD 130 is intentionally floating, and the RIP route has a higher AD than OSPF. Route selection first prefers longest match, then lower AD among routes to the same prefix length.

Answer

The static route will be preferred because static routes always beat dynamic routes.

Answer

RIP wins because its metric is lower than OSPF cost.

Answer

All three routes should load-balance because the prefix length is the same.

Question 7

Drag and drop the steps into the recommended configuration order for setting up VLANs, assigning access ports, configuring 802.1Q trunking with a non-default native VLAN, and verifying the setup on a Cisco IOS-XE switch.

Accepted Answer

1. Create VLANs, 2. Configure trunking with non-default native VLAN, 3. Assign access ports to VLANs, 4. Verify configuration. After creating VLANs, the recommended order is to configure trunking with a non-default native VLAN before assigning access ports. This ensures the trunk is ready with the correct native VLAN, preventing mismatches and allowing the switch to carry traffic for the new VLANs. Options B and D fail because VLANs must exist first. Option A places trunking last, which is not the best practice.

Answer

1. Create VLANs, 2. Assign access ports to VLANs, 3. Configure trunking with non-default native VLAN, 4. Verify configuration

Answer

1. Assign access ports to VLANs, 2. Create VLANs, 3. Configure trunking with non-default native VLAN, 4. Verify configuration

Answer

1. Configure trunking with non-default native VLAN, 2. Create VLANs, 3. Assign access ports to VLANs, 4. Verify configuration

Question 8

A network administrator is troubleshooting a connectivity issue between two remote sites connected via a WAN link. Hosts on VLAN 10 at Site A (192.168.10.0/24) cannot ping the server at Site B (10.10.20.100). The router at Site A has a default route configured with the next-hop IP address 10.10.10.2. The administrator checks the routing table on Router A and notices that the default route is not installed. What is the most likely cause of the problem?

Accepted Answer

The next-hop router 10.10.10.2 is unreachable.. Option D is correct because the default route uses a next-hop IP (10.10.10.2) and will only be installed in the routing table if that next-hop is reachable. Since the router’s routing table shows no default route, the most likely cause is that the next-hop 10.10.10.2 is unreachable, preventing the static route from being used. This explains why traffic fails despite the configuration.

Answer

The static route for 10.10.20.0/24 is missing from the routing table.

Answer

The GigabitEthernet0/0 interface is administratively down.

Answer

The default route is not configured; the gateway of last resort is missing.

Question 9

Drag and drop the wireless terms on the left to the correct descriptions on the right.

Accepted Answer

SSID: The network name broadcast by an access point to identify the wireless network.. 802.11ac (Wi-Fi 5) operates only in the 5 GHz band and introduced support for 160 MHz-wide channels to achieve higher throughput. 802.11ax (Wi-Fi 6) adds OFDMA for more efficient channel use and works in both 2.4 GHz and 5 GHz bands. WPA3-Personal uses SAE (Simultaneous Authentication of Equals) to protect pre-shared key authentication against offline dictionary attacks. A Basic Service Set (BSS) consists of a single AP and its associated clients, identified by the AP's radio MAC address (BSSID). A Wireless LAN Controller (WLC) centralizes management, handling AP configuration, client roaming, and security policies across the wireless network.

Answer

BSSID: The MAC address of the access point's radio interface, used to uniquely identify a BSS.

Answer

RSSI: A measurement of the power level of the received radio signal, indicating signal strength.

Answer

DFS: A mechanism that allows wireless devices to avoid interference with radar systems by dynamically selecting channels.

Question 10

A junior network engineer configured a floating static route on Router R1 to provide backup connectivity to a remote network 10.10.10.0/24. The primary connection uses OSPF. However, after the primary link fails, hosts on R1 cannot reach the remote network. The OSPF adjacency is down, and the floating static route is not appearing in the routing table. Based on the exhibit, what is the most likely cause of the issue?

Accepted Answer

The static route's next-hop becomes unreachable after the primary OSPF link fails.. Option B is correct because the floating static route's next-hop becomes unreachable after the primary OSPF link fails. In the exhibit, the next-hop IP is likely configured to an address that is only reachable via OSPF; when that adjacency drops, the router has no route to the next-hop, so it cannot recursively resolve the static route. As a result, the route does not appear in the routing table. Option A is wrong because the route is present in the configuration (as a floating static route). Option C is wrong because the administrative distance of the floating static route is intentionally higher than OSPF's so that it only installs when OSPF fails; this is correct behavior. Option D is wrong because a default route would not override a more specific static route to 10.10.10.0/24.

Answer

The floating static route is missing from the configuration.

Answer

The administrative distance of the static route is too high.

Answer

The default route is overriding the static route to 10.10.10.0/24.

CCNA Practice Test 5 — 10 Questions

Exhibit

CCNA Practice Test 5 — 10 Questions

Exhibit