CCNA Practice Exam 68 — 20 Questions

Question 1

Match each automation or API term to its most accurate role.

Accepted Answer

REST: Architectural style for designing networked applications using HTTP. These pairings correctly associate each automation/API term with its primary role.

Question 2

Drag and drop the STP/Rapid PVST+ terms on the left to the correct descriptions on the right.

Accepted Answer

Root bridge: Bridge with the lowest bridge ID in the STP topology. These definitions match standard STP/Rapid PVST+ terminology.

Question 3

Match each basic controller or API term to its most accurate meaning.

Accepted Answer

REST API: Uses HTTP methods to perform CRUD operations on network devices. These pairs match controller or API terms correctly. REST API uses HTTP, controller centralizes management, northbound/southbound interfaces define directions, JSON is common data format, and YANG models network data.

Answer

Controller: A centralized software that manages network devices and policies

Answer

Northbound interface: Interface between controller and applications

Answer

JSON: A data format used for exchanging information between systems

Question 4

Match each programmability term to its most accurate description.

Accepted Answer

API: A set of protocols and tools for building software applications, specifying how components should interact.. Each term is correctly matched with its standard definition in software development and API contexts.

Answer

API: A programming language used to write automation scripts for network devices.

Answer

API: A hardware component that connects network devices to the internet.

Answer

API: A security protocol that encrypts data transmitted over a network.

Question 5

Match each HTTP method to the most common API action.

Accepted Answer

GET: Retrieve a resource. These are the standard HTTP methods and their typical CRUD actions in RESTful APIs.

Question 6

Drag and drop the PortFast and BPDU protection commands on the left to the correct descriptions on the right.

Accepted Answer

spanning-tree portfast: Enables PortFast on an interface. These commands are used to configure PortFast and BPDU protection on Cisco switches.

Question 7

Match each network service to its primary function.

Accepted Answer

DNS: Translates domain names to IP addresses. Each network service has a distinct primary function: DNS translates names to IPs, DHCP automates IP assignment, NTP synchronizes time, SNMP manages devices, FTP transfers files, and HTTP serves web content.

Answer

DNS: Assigns IP addresses dynamically to devices on a network

Answer

DNS: Synchronizes time across network devices

Answer

DNS: Manages and monitors network devices

Question 8

Drag and drop the PDU names on the left to the correct OSI model layers on the right.

Accepted Answer

Application: Message, Transport: Segment, Network: Packet, Data Link: Frame, Physical: Bit, Session: Data. In the OSI model, each layer processes a specific Protocol Data Unit (PDU): Data is the term for application information at Layer 7, a segment is the Transport layer (Layer 4) PDU, a packet belongs to the Network layer (Layer 3), a frame is the Data Link layer (Layer 2) PDU, and bits are transmitted at the Physical layer (Layer 1). This pairing follows the standard OSI terminology without involving other layers.

Answer

Application: Data, Transport: Segment, Network: Packet, Data Link: Frame, Physical: Bit, Session: Message

Answer

Application: Message, Transport: Packet, Network: Segment, Data Link: Frame, Physical: Bit, Session: Data

Answer

Application: Data, Transport: Segment, Network: Packet, Data Link: Frame, Physical: Bit, Session: Message

Question 9

Drag and drop the following steps into the correct order to sequence the DNS resolution process from a client query to receiving an A-record response, followed by the diagnostic workflow using nslookup and dig to identify a missing or incorrect A-record.

Accepted Answer

Client sends DNS query to configured DNS server → DNS server checks cache and forwards query to root server → Root server directs to TLD server → TLD server directs to authoritative server → Authoritative server returns A-record to client → Client uses nslookup to verify → Client uses dig +trace for detailed path analysis. The standard DNS resolution sequence ends with the client receiving the A-record. Troubleshooting uses nslookup first for basic checks, then dig +trace for detailed path analysis.

Answer

Client sends DNS query to root server → Root server directs to TLD server → TLD server directs to authoritative server → Authoritative server returns A-record to client → Client uses dig +trace → Client uses nslookup to verify

Answer

Client sends DNS query to configured DNS server → DNS server checks cache and forwards query to root server → Root server directs to TLD server → TLD server directs to authoritative server → Authoritative server returns A-record to client → Client uses dig +trace → Client uses nslookup to verify

Answer

Client sends DNS query to configured DNS server → DNS server checks cache and returns A-record from cache → If not cached, server forwards query to root server → Root server directs to TLD server → TLD server directs to authoritative server → Authoritative server returns A-record to client → Client uses nslookup → Client uses dig +trace

Question 10

Drag and drop the following steps into the correct order to troubleshoot an end-to-end connectivity issue using a bottom-up approach.

Accepted Answer

Check physical layer connectivity and interface status. The correct troubleshooting order follows the OSI model bottom-up: start with physical connectivity (A), then verify Layer 3 addressing (B), use diagnostic tools (C) to isolate the failure, and finally implement the solution and verify restoration (D). Skipping layers can lead to misdiagnosis.

Question 11

Drag and drop the routing concepts on the left to the matching descriptions on the right.

Accepted Answer

Route table: Contains routes that determine network traffic direction. Administrative distance (AD) indicates the trustworthiness of a routing source; OSPF is assigned AD 110. Metric is the cost used by OSPF, calculated based on bandwidth. Longest-prefix match selects the route with the most specific (longest) subnet mask. Directly connected routes have an AD of 0 and are added automatically when an interface IP is configured. Next-hop is the IP address of the next router to forward packets to. Dynamic routes are learned through routing protocols like OSPF or EIGRP.

Question 12

Drag and drop the network monitoring technologies on the left to their correct descriptions on the right.

Accepted Answer

SNMP: Protocol for collecting and organizing information about managed devices on IP networks. These pairings match network monitoring technologies to their correct descriptions.

Question 13

Drag and drop the syslog and NTP items on the left to the correct descriptions on the right.

Accepted Answer

Syslog facility: Identifies the type of system or process that generated the log message. These pairings match syslog and NTP items to their correct descriptions.

Question 14

Drag and drop the protocols/technologies on the left to the descriptions on the right.

Accepted Answer

SSH: Provides secure remote access to network devices using encryption, typically on TCP port 22.. NETCONF uses XML-encoded RPCs over SSH (port 830) for device configuration. RESTCONF uses HTTP/HTTPS methods with JSON or XML. YANG is a data modeling language defining structure of configuration/state data. gRPC is a high-performance RPC framework using Protocol Buffers over HTTP/2. OpenConfig provides vendor-neutral YANG models. These pairings reflect their primary characteristics as tested on the CCNA.

Answer

Telnet: Provides secure remote access to network devices using encryption, typically on TCP port 23.

Answer

HTTP: Provides secure remote access to network devices using encryption, typically on TCP port 80.

Answer

FTP: Provides secure remote access to network devices using encryption, typically on TCP port 21.

Question 15

Drag and drop the OSI model layer names on the left to the correct PDU name and responsibility description on the right.

Accepted Answer

Layer 2: Data Link - PDU: Frame - Responsibility: Provides node-to-node data transfer and handles error detection from the Physical layer.. In the OSI model, data is encapsulated as it moves down the layers. At the Data Link layer (Layer 2), a header and trailer are added to form a frame, which enables node-to-node delivery and error detection via CRC. The Network layer (Layer 3) adds a header to create a packet (or datagram) that includes logical addressing (IP) and enables routing between different networks. The Transport layer (Layer 4) segments data and adds a header with port numbers to create a segment (TCP) or datagram (UDP), providing either reliable (connection-oriented) or unreliable (connectionless) end-to-end delivery. The Session, Presentation, and Application layers (Layers 5-7) generally use the generic PDU name 'Data', with Layer 5 managing sessions, dialog control, and synchronization, and Layer 7 providing network services to user applications. Matching any other PDU name or responsibility to these layers would violate this encapsulation hierarchy and functional separation.

Answer

Layer 3: Network - PDU: Packet - Responsibility: Provides end-to-end delivery and logical addressing (IP addresses) for routing across networks.

Answer

Layer 4: Transport - PDU: Segment - Responsibility: Provides reliable or unreliable delivery and error recovery between hosts.

Answer

Layer 1: Physical - PDU: Bits - Responsibility: Transmits raw bit stream over the physical medium.

Question 16

Drag and drop the Wi-Fi features on the left to the correct descriptions on the right.

Accepted Answer

MIMO: Uses multiple antennas to improve throughput and range. 802.11ax (Wi-Fi 6) uses OFDMA to divide channels into smaller subcarriers, allowing simultaneous transmission to multiple clients and improving efficiency in dense environments. WPA3-Personal employs Simultaneous Authentication of Equals (SAE) to replace the vulnerable pre-shared key handshake, providing secure password-based authentication resistant to offline dictionary attacks. A Basic Service Set (BSS) is the fundamental building block of a WLAN, consisting of a single access point (AP) and all associated wireless clients. A Wireless LAN Controller (WLC) centralizes AP management, handling configuration, firmware updates, and seamless roaming across multiple APs. Channel bonding (80 MHz) combines two 40 MHz channels, doubling the channel width to increase throughput; it is commonly used in 802.11ac (Wi-Fi 5) to achieve higher data rates.

Question 17

Drag and drop the IPv6 address types on the left to their corresponding scope and prefix on the right.

Accepted Answer

Global Unicast: 2000::/3, Internet scope. IPv6 address types have defined scopes and prefixes: Global Unicast has global scope with 2000::/3, Link-Local has link-local scope with FE80::/10, Unique Local has unique local scope with FC00::/7, Multicast has multicast scope with FF00::/8, Loopback has loopback scope with ::1/128, and Unspecified has unspecified scope with ::/128. Each address type's description should explicitly state its scope to clarify the matching task.

Answer

FE80::/10; link-local scope, automatically assigned on each interface

Answer

FC00::/7; unique local scope, private, not routable on the Internet

Answer

FF00::/8; multicast scope, one-to-many communication

Question 18

Drag and drop the wireless terms on the left to the correct descriptions on the right.

Accepted Answer

SSID: The network name broadcast by the access point to identify the wireless network.. 802.11ac (Wi-Fi 5) uses OFDM and can bond channels up to 160 MHz, but operates exclusively in the 5 GHz band. 802.11ax (Wi-Fi 6) uses OFDMA for more efficient multi-user access and works in both 2.4 GHz and 5 GHz. WPA3-Personal secures pre-shared keys with SAE, replacing WPA2’s PSK, while WPA3-Enterprise uses 192-bit encryption and EAP for strong authentication. An autonomous AP functions standalone without a wireless controller.

Answer

BSSID: The MAC address of the access point's radio interface, used to uniquely identify the access point.

Answer

Channel: A specific frequency range used for wireless communication, such as 2.4 GHz or 5 GHz bands.

Answer

Beacon: A management frame sent periodically by the access point to announce the presence of the wireless network.

Question 19

Drag and drop the following steps into the correct order to describe the TCP three-way handshake between a PC (192.168.1.10) and a web server (192.168.2.20). Note: Only three of the four steps are part of the actual handshake. Omit the step that is not part of the three-way handshake.

Accepted Answer

PC sends SYN to server (192.168.2.20). The three-way handshake between specific IP addresses follows the same SYN, SYN-ACK, ACK sequence, with the client (PC) initiating and the server responding, leading to a connection ready for application data.

Question 20

Match each HTTP method to the action it most commonly represents in a REST-style API.

Accepted Answer

GET: Retrieve a resource. These HTTP methods correspond to standard CRUD operations in RESTful APIs. Each pairing matches the method with its typical action as defined in HTTP specifications.

Answer

POST: Update a resource

Answer

PUT: Delete a resource

Answer

DELETE: Create a resource