CCNA Practice Exam 51 — 20 Questions

Question 1

Drag and drop the wireless terms on the left to the correct descriptions on the right.

Options:
A: SSID: The network name broadcast by an access point to identify the wireless network.
B: BSSID: The MAC address of the access point's radio interface, used to uniquely identify a BSS.
C: RSSI: A measurement of the power level of the received radio signal, indicating signal strength.
D: DFS: A mechanism that allows wireless devices to avoid interference with radar systems by dynamically selecting channels.

Accepted Answer

SSID: The network name broadcast by an access point to identify the wireless network.. SSID (Service Set Identifier) is the network name broadcast by an access point to identify the wireless network, allowing clients to distinguish between different networks. BSSID (Basic Service Set Identifier) is the MAC address of the AP's radio interface, uniquely identifying a specific BSS. RSSI (Received Signal Strength Indicator) measures the power level of the received radio signal, indicating signal strength. DFS (Dynamic Frequency Selection) is a mechanism that allows wireless devices to avoid interference with radar systems by dynamically selecting channels. Each term correctly matches the provided description.

Question 2

Which IPv6 address type is automatically created on an interface and used for link-local communication?

Accepted Answer

Link-local. IPv6 interfaces automatically generate a link-local address in FE80::/10 for local-segment functions such as neighbor discovery.

Answer

Unique local

Answer

Global unicast

Answer

Anycast

Question 3

A host sends traffic to a web server on another subnet. Which address is used as the destination MAC address in the first Ethernet frame sent by the host?

Accepted Answer

The MAC address of the local default gateway. When a host wants to communicate with a device on a different subnet, it cannot reach that device directly. The host must send the frame to its default gateway, which is the router that connects to other subnets. Therefore, the destination MAC address in the first Ethernet frame is the MAC address of the local default gateway, not the remote web server (A). The DNS server (C) is used for name resolution, not for forwarding traffic. The broadcast MAC address (D) would send the frame to all devices on the local subnet, which is not appropriate for unicast communication to a remote destination.

Answer

The MAC address of the remote web server

Answer

The MAC address of the DNS server

Answer

The broadcast MAC address

Question 4

Why is NTP especially useful when devices send logs to a centralized Syslog server?

Accepted Answer

It helps align device clocks so centralized log timestamps can be correlated more accurately.. NTP is especially useful because synchronized clocks make the log timestamps more meaningful and easier to correlate. In plain language, if each device thinks the current time is different, the sequence of events in the centralized log becomes confusing. NTP helps align time across devices so the logs tell a more accurate story.

This is an operational best practice. Syslog collects the messages, and NTP makes their timing consistent. The correct answer is the one focused on timestamp correlation.

Answer

It assigns the Syslog server an IP address.

Answer

It replaces the need for a Syslog server.

Answer

It encrypts every Syslog message automatically.

Question 5

Which rule does a router apply first when selecting a route for a destination packet?

Accepted Answer

Longest prefix match. Routers first look for the most specific matching prefix. Administrative distance and metrics matter when competing routes exist for the same destination prefix length.

Answer

Lowest metric across all protocols

Answer

Oldest route in the routing table

Answer

Default route if one exists

Question 6

Hosts in VLAN 10 need to communicate with hosts in VLAN 20. What is required for that communication to work?

Accepted Answer

A Layer 3 routing function. Traffic between VLANs must be routed. A router or multilayer switch provides the Layer 3 function needed for inter-VLAN communication.

Answer

A DHCP server

Answer

A DNS server

Answer

A second access switch

Question 7

Which three options accurately describe characteristics of OSPFv2 in a single area? (Choose three.)

Accepted Answer

OSPF uses cost as its metric, which is derived from the bandwidth of the interface.. OSPFv2 uses cost as its metric, derived from interface bandwidth using the formula cost = reference bandwidth / interface bandwidth (default reference bandwidth is 100 Mbps). Hello packets are used to discover neighbors, maintain adjacencies, and act as keepalives (default every 10 seconds on broadcast networks). The designated router (DR) is elected only on broadcast multiaccess networks (e.g., Ethernet) to reduce LSA flooding. The incorrect options: OSPFv2 does not natively support IPv6 (OSPFv3 is needed for IPv6); LSAs are refreshed every 30 minutes, not 30 seconds; router IDs must be unique across the OSPF domain, not the same in an area.

Answer

OSPFv2 supports IPv6 routing natively without any additional configuration.

Answer

OSPF routers in the same area must be configured with the same router ID.

Answer

Link-state advertisements (LSAs) are sent periodically every 30 seconds by default.

Question 8

Why is an extended ACL usually placed close to the source of the traffic being filtered?

Accepted Answer

To stop unwanted traffic earlier and conserve bandwidth. Extended ACLs can filter by source, destination, and protocol. Placing them near the source drops unwanted traffic before it crosses more of the network.

Answer

Because standard ACLs cannot be applied near the destination

Answer

To make NAT translation easier on inside interfaces

Answer

Because extended ACLs only work inbound on access interfaces

Question 9

Drag and drop the items on the left to the correct descriptions on the right.

Accepted Answer

show interface transceiver: Outputs Digital Optical Monitoring (DOM) data such as temperature, voltage, and Tx/Rx power for installed transceivers.. show interface transceiver outputs Digital Optical Monitoring (DOM) data such as temperature, voltage, and Tx/Rx power for installed transceivers. show controllers ethernet-controller phy displays physical layer diagnostics including cable length estimates, MDI/MDI-X status, pair swaps, and link quality counters. SFP-10G-SR is a multimode fiber transceiver supporting 10 Gigabit Ethernet at 850nm over distances up to 300 meters. Cat6a is enhanced copper twisted-pair cabling rated for 10GBASE-T up to 100 meters with improved alien crosstalk performance. LC connectors are the small form-factor duplex fiber connectors commonly used with SFP and SFP+ optical modules.

Answer

show interface transceiver: Displays physical layer diagnostics including cable length estimates, MDI/MDI-X status, pair swaps, and link quality counters.

Answer

Cat6a: Multimode fiber transceiver supporting 10 Gigabit Ethernet at 850nm over distances up to 300 meters.

Question 10

Which three of the following statements about Network Address Translation (NAT) are correct? (Choose three.)

Accepted Answer

Static NAT provides a one-to-one mapping between a private IP and a public IP.. Static NAT provides a one-to-one mapping between a private IP and a public IP, ensuring that a specific internal host always uses the same public address. Dynamic NAT uses a pool of public IP addresses assigned on a first-come, first-served basis, so internal hosts compete for available addresses. PAT (Port Address Translation) allows multiple internal hosts to share a single public IP by differentiating sessions via unique port numbers, which is the most common form of NAT used in home and small office routers.

Answer

Dynamic NAT always assigns the same public IP to a given internal host.

Answer

NAT eliminates the need for any routing in a network.

Answer

PAT requires a unique public IP for every concurrent session.

Question 11

Which three of the following are characteristics of Layer 2 Ethernet switches that support VLANs? (Choose three.)

Accepted Answer

They use the Spanning Tree Protocol to prevent Layer 2 loops.. Layer 2 Ethernet switches that support VLANs forward frames based on the destination MAC address, which is the fundamental switching decision. They can segment a LAN into multiple broadcast domains because each VLAN creates its own isolated broadcast domain, preventing unnecessary traffic propagation. They use the Spanning Tree Protocol (STP) to prevent Layer 2 loops by dynamically blocking redundant paths, ensuring a loop-free topology.

Answer

They forward frames based on the destination IP address.

Answer

They perform routing between VLANs without a router.

Answer

They use ARP to resolve IP addresses to MAC addresses.

Question 12

Which four of the following are best practices for securing network services and devices? (Choose four.)

Accepted Answer

Implement role-based access control (RBAC) to limit user privileges.. Disabling unused ports, implementing role-based access control (RBAC), enabling logging, and keeping firmware updated are all critical security best practices: they reduce the attack surface, limit user permissions, detect threats, and patch known vulnerabilities. Using Telnet is insecure because it transmits data in cleartext, unlike SSH. Placing all devices on the same VLAN undermines network segmentation and allows lateral movement by attackers.

Answer

Place all network devices on the same VLAN to simplify security policy enforcement.

Answer

Use Telnet for remote management because it is simpler to configure than SSH.

Question 13

Which three of the following are key benefits of integrating AI into network operations? (Choose three.)

Accepted Answer

Automated detection and correlation of anomalies across the network. The three correct answers highlight practical AI benefits: anomaly detection correlates diverse telemetry (NetFlow, SNMP) to identify issues faster; real-time traffic classification uses ML models for dynamic policy enforcement without manual rule updates; predictive maintenance analyzes historical data to forecast failures, enabling proactive intervention. The wrong options are unrealistic: AI cannot eliminate all human administrators (complex troubleshooting still needs humans), cannot guarantee 100% uptime (failures still occur), and cannot automatically reconfigure physical cabling (that requires physical access).

Answer

Guaranteed 100% network uptime through self-healing algorithms

Answer

Complete elimination of the need for human network administrators

Answer

Automatic reconfiguration of physical cabling without manual intervention

Question 14

Drag and drop the following steps into the correct order to implement a basic network monitoring workflow using telemetry and streaming analytics on Cisco IOS-XE.

Accepted Answer

Collect data via telemetry from network devices. The workflow begins by collecting data via telemetry from network devices (A), then streaming that data to an analytics platform (B). After streaming, the data is monitored using dashboards (C), and finally alerts are generated for threshold violations (D).

Question 15

A network engineer notices that users on VLAN 100 are experiencing intermittent connectivity to the server farm. The switch connecting these users shows no errors on the uplink interface, but the server farm switch reports a high number of input errors on its connected interface. The engineer runs 'show controllers' on the server farm switch. What is the most likely cause of the issue?

Accepted Answer

The SFP module is faulty or incompatible with the cable type.. The 'show controllers' command on the server farm switch reveals physical-layer issues such as framing errors, CRC errors, or alignment errors, which are often caused by faulty or incompatible SFP modules. Since the uplink interface on the user switch shows no errors, the problem is isolated to the server farm switch's interface, and a faulty SFP can introduce signal degradation or electrical issues without necessarily causing complete link failure. Option B is correct because SFP incompatibility or defects commonly produce input errors at the physical layer, even when the link appears up.

Answer

The interface is configured with the wrong duplex setting.

Answer

The cable is too long, causing attenuation.

Answer

Auto-negotiation is disabled, causing a speed mismatch.

Question 16

Drag and drop the following steps into the correct order to configure PAT (Port Address Translation) on a Cisco IOS-XE router and describe the translation process for an outbound packet.

Accepted Answer

Enter global configuration mode, mark inside and outside interfaces, create a pool of global addresses, then enable PAT with overload.. For PAT configuration on a Cisco IOS-XE router, the correct order is: first enter global configuration mode (configure terminal), then define inside and outside interfaces (ip nat inside / ip nat outside under interface configuration), then create the global address pool (ip nat pool), and finally enable PAT with overload (ip nat inside source list ... pool ... overload). This sequence matches only option A. Option B is incorrect because creating the pool must be done after entering global configuration mode, not before. Option C is incorrect because marking interfaces must be done from global configuration mode, and enabling PAT requires a pool to exist. Option D is incorrect because enabling PAT without a pool will fail, and marking interfaces must be done before enabling PAT.

Answer

Create a pool of global addresses, mark inside and outside interfaces, enter global configuration mode, then enable PAT with overload.

Answer

Mark inside and outside interfaces, enter global configuration mode, enable PAT with overload, then create a pool of global addresses.

Answer

Enter global configuration mode, enable PAT with overload, create a pool of global addresses, then mark inside and outside interfaces.

Question 17

Drag and drop the following steps into the correct order to describe the data encapsulation process as it flows down the OSI model from the source host.

Accepted Answer

Application data is generated and passed to the Transport layer.. Encapsulation proceeds from the top OSI layers to the bottom. First, the application generates data (Step 1). The Transport layer then adds a header (TCP or UDP) to create a segment (Step 2) because this is the first step in preparing data for reliable delivery. The Network layer adds an IP header to form a packet (Step 3), which provides logical addressing and routing information. The Data Link layer adds a frame header and trailer to create a frame (Step 4), enabling physical addressing (MAC) and error detection. Finally, the Physical layer converts the frame to bits for transmission (Step 5), as it is the layer that ultimately puts signals on the wire.

Question 18

Why is a default route often described as a route of last resort?

Accepted Answer

Because it is used only when no more specific route matches.. It is described that way because it is used only when no more specific route matches the destination. In practical terms, the router checks for connected, static, or dynamic routes that describe the destination more precisely. If it finds none, the default route becomes the fallback path.

This phrase captures the default route’s purpose exactly. It is not the fastest route or the most specific route. It is simply the catch-all route for otherwise unknown destinations.

Answer

Because it always has the lowest bandwidth.

Answer

Because it is more specific than any other route.

Answer

Because it can be learned only through OSPF.

Question 19

Drag and drop the 802.11 standards on the left to their correct frequency band and maximum throughput on the right.

Accepted Answer

802.11b: 2.4 GHz, 11 Mbps. Each 802.11 standard operates in specific frequency bands and has a maximum theoretical throughput. 802.11a uses 5 GHz at 54 Mbps, 802.11b uses 2.4 GHz at 11 Mbps, 802.11g uses 2.4 GHz at 54 Mbps, 802.11n uses both 2.4 and 5 GHz up to 600 Mbps, 802.11ac uses 5 GHz up to 6.9 Gbps, and 802.11ax uses 2.4, 5, and 6 GHz up to 9.6 Gbps.

Question 20

Drag and drop the following steps into the correct order to describe the encapsulation of data as it passes down the TCP/IP stack for transmission.

Accepted Answer

Application data is generated by the user application.. The encapsulation process starts with the application layer generating data. The transport layer packages data into segments (TCP) or datagrams (UDP). The network layer adds an IP header, creating a packet. The data link layer adds a frame header and trailer (frame). Finally, the physical layer converts the frame into bits for transmission.