CCNA Practice Test 7 — 10 Questions

Question 1

Drag each automation or API concept from the left to its corresponding description on the right. Not all descriptions are used.

Concepts:
- Northbound API
- Southbound API
- JSON
- HTTPS

Accepted Answer

Application-facing interface to the controller. Northbound API: the application-facing interface of an SDN controller, allowing apps to request services. Southbound API: the interface that enables the controller to configure managed devices, such as OpenFlow. JSON: a structured data format using key/value pairs and arrays, lightweight and machine‑friendly. HTTPS: secure, encrypted transport for API communications, protecting data in transit. Distractors: 'Human-readable serialization format' describes YAML, not JSON or APIs. 'Protocol for network device configuration' might refer to NETCONF or CLI, not HTTPS or the APIs listed.

Question 2

An engineer successfully authenticates to a controller and receives a token. What is the usual reason for including that token in later API requests?

Accepted Answer

To identify and authorize the client without resending full login credentials each time. The token proves the client has already authenticated and is authorized to continue interacting with the API for the lifetime of that token or session. It is commonly sent in an HTTP header such as Authorization. It does not replace the need for IP routing or DNS resolution.

Answer

To convert HTTP requests into SNMP traps

Answer

To elect the active controller in the cluster

Answer

To compress JSON payloads before transport

Question 3

Drag and drop the wireless LAN terms on the left to the correct descriptions on the right.

Accepted Answer

Access Point (AP). 802.11ac (Wi-Fi 5) operates exclusively in the 5 GHz band and uses wide channels (80/160 MHz) for high throughput. 802.11ax (Wi-Fi 6) introduces OFDMA for efficiency and supports both 2.4 GHz and 5 GHz. WPA3 enhances security with Simultaneous Authentication of Equals (SAE), replacing WPA2's Pre-Shared Key (PSK) to resist brute-force attacks. The SSID is the human-readable network name broadcast by access points. Channel overlap is a critical issue in the 2.4 GHz band because only three channels (1, 6, 11) are non-overlapping. WLC management interfaces commonly use HTTPS, SSH, or console for secure configuration.

Answer

Service Set Identifier (SSID)

Answer

Basic Service Set (BSS)

Answer

Wireless LAN Controller (WLC)

Question 4

You are connected to R1 via the console. R1's GigabitEthernet0/0 (10.0.0.1/30) connects to an ISP router at 10.0.0.2/30. The internal network has a web server at 192.168.1.10 and a mail server at 192.168.1.20. You need to configure NAT so that internal hosts can access the internet (PAT overload) and external users can reach the web server via public IP 203.0.113.10 and the mail server via public IP 203.0.113.11. The inside interface is GigabitEthernet0/1 (192.168.1.1/24) and the outside interface is GigabitEthernet0/0.

Accepted Answer

ip access-list standard PERMIT_INTERNAL permit 192.168.1.0 0.0.0.255
interface GigabitEthernet0/1
 ip nat inside
interface GigabitEthernet0/0
 ip nat outside
ip nat inside source list PERMIT_INTERNAL interface GigabitEthernet0/0 overload
ip nat inside source static tcp 192.168.1.10 80 203.0.113.10 80 extendable
ip nat inside source static tcp 192.168.1.20 25 203.0.113.11 25 extendable. The named standard ACL PERMIT_INTERNAL permits all internal hosts in 192.168.1.0/24. The 'ip nat inside source list PERMIT_INTERNAL interface GigabitEthernet0/0 overload' command enables PAT, translating internal addresses to the outside interface's IP. Static NAT entries map web and mail servers to public IPs with the 'extendable' keyword to allow both PAT and static NAT. Proper interface NAT direction (inside/outside) is crucial.

Answer

ip access-list standard PERMIT_INTERNAL permit 192.168.1.0 0.0.0.255
interface GigabitEthernet0/1
 ip nat outside
interface GigabitEthernet0/0
 ip nat inside
ip nat inside source list PERMIT_INTERNAL interface GigabitEthernet0/0 overload
ip nat inside source static tcp 192.168.1.10 80 203.0.113.10 80
ip nat inside source static tcp 192.168.1.20 25 203.0.113.11 25

Answer

ip access-list standard PERMIT_INTERNAL permit 192.168.1.0 0.0.0.255
interface GigabitEthernet0/1
 ip nat inside
interface GigabitEthernet0/0
 ip nat outside
ip nat inside source list PERMIT_INTERNAL interface GigabitEthernet0/0 overload
ip nat inside source static 192.168.1.10 203.0.113.10
ip nat inside source static 192.168.1.20 203.0.113.11

Answer

ip access-list standard PERMIT_INTERNAL permit 192.168.1.0 0.0.0.255
interface GigabitEthernet0/1
 ip nat inside
interface GigabitEthernet0/0
 ip nat outside
ip nat inside source list PERMIT_INTERNAL interface GigabitEthernet0/0 overload
ip nat outside source static tcp 203.0.113.10 80 192.168.1.10 80
ip nat outside source static tcp 203.0.113.11 25 192.168.1.20 25

Question 5

A router has two static routes to the same 192.168.1.0/24 network: one via next-hop 10.1.1.1 with metric 10, and the other via next-hop 10.1.1.2 with metric 5. Both routes use the default administrative distance of 1. Which next hop does the router use to forward packets to this destination?

Accepted Answer

10.1.1.2 because it has the lower metric. Both routes have the same prefix length and the same administrative distance. The route with the lower metric is preferred for a static route when the AD is equal only if different metrics are configured, and here the route via 10.1.1.2 has metric 5 versus metric 10.

Answer

10.1.1.1 because it appears first in the configuration

Answer

Both next hops because all static routes always load balance

Answer

Neither next hop because static routes need tracking to be installed

Question 6

Drag and drop the following steps into the correct order to configure PAT (overload) on a Cisco router using a single public IP address on the outside interface.

Accepted Answer

Enter global configuration mode. The correct sequence is: first enter global configuration mode, then define the access list that matches inside traffic. Next, mark the inside and outside interfaces with `ip nat inside` and `ip nat outside` respectively. Finally, enable PAT with overload using `ip nat inside source list interface overload`. This order ensures the router knows which interfaces are internal and external, which traffic to translate, and how to perform the translation.

Question 7

Which command enables IPv6 routing on a Cisco router?

Accepted Answer

ipv6 unicast-routing. The global configuration command 'ipv6 unicast-routing' enables IPv6 forwarding on a Cisco router. 'ipv6 enable' is an interface-level command used to enable IPv6 on a specific interface, not globally. 'ip routing ipv6' and 'ipv6 route enable' are syntactically invalid commands that do not exist in Cisco IOS.

Answer

ipv6 enable

Answer

ip routing ipv6

Answer

ipv6 route enable

Question 8

A host sends traffic to a web server on another subnet. Which address is used as the destination MAC address in the first Ethernet frame sent by the host?

Accepted Answer

The MAC address of the local default gateway. When a host wants to communicate with a device on a different subnet, it cannot reach that device directly. The host must send the frame to its default gateway, which is the router that connects to other subnets. Therefore, the destination MAC address in the first Ethernet frame is the MAC address of the local default gateway, not the remote web server (A). The DNS server (C) is used for name resolution, not for forwarding traffic. The broadcast MAC address (D) would send the frame to all devices on the local subnet, which is not appropriate for unicast communication to a remote destination.

Answer

The MAC address of the remote web server

Answer

The MAC address of the DNS server

Answer

The broadcast MAC address

Question 9

You are connected to R1 via console. The network has a primary link to the ISP via R2 and a backup link via R3. Configure IPv4 and IPv6 floating static default routes on R1 so that the primary path goes through R2 (AD 1) and the backup through R3 (AD 10). Additionally, configure a static route on R1 for the internal LAN 192.168.10.0/24 via R2 (AD 1). The current configuration includes a static default route ip route 0.0.0.0 0.0.0.0 10.0.0.3, which causes a recursive routing failure because 10.0.0.3 is not a valid next-hop address. Identify and fix the issue, then apply the floating static routes.

Accepted Answer

Remove the existing incorrect IPv4 static default route and reconfigure the primary IPv4 default route with the correct next-hop address (10.0.0.2) and AD 1. Add the backup IPv4 default route via 10.0.0.6 with AD 10. Then add IPv6 static default routes: ipv6 route ::/0 2001:DB8:1:1::2 1 and ipv6 route ::/0 2001:DB8:2:1::2 10. Also add the static route for 192.168.10.0/24 via 10.0.0.2 with AD 1.. The IPv4 default route currently uses next-hop 10.0.0.3, which is not a valid address on any directly connected interface, causing a recursive lookup failure. Option A fixes this by removing the incorrect route and correctly adding the primary (10.0.0.2 with AD 1) and backup (10.0.0.6 with AD 10) default routes, fulfilling the floating static requirement. It also adds both IPv6 floating default routes and the LAN static route. Option B is wrong because adding a route to 10.0.0.0/30 via R3 does not fix the next-hop 10.0.0.3 failure for the default route. Option C incorrectly reverses the administrative distances, making the backup path the primary. Option D erroneously uses an exit interface instead of the correct next-hop IP, which is not suitable for multi-access or point-to-point networks without additional configuration and does not resolve the original misconfigured next-hop.

Answer

Add a static route to 10.0.0.0/30 via the backup link to R3, then the default route to 10.0.0.2 will work. Then configure IPv6 default routes with AD 1 and 10 as described.

Answer

Change the administrative distance of the IPv4 default route to 10 and the backup to 1, so the backup becomes primary. Then configure IPv6 default routes with AD 10 and 1 respectively.

Answer

Remove the existing IPv4 static default route and configure it with the next-hop as the exit interface (e.g., GigabitEthernet0/0) instead of the IP address. Then add IPv6 default routes using the exit interface as well.

Question 10

A switch port and a host NIC have a duplex mismatch. Which symptom is most likely?

Accepted Answer

Increased late collisions and poor performance. A duplex mismatch often causes collisions, frame errors, and degraded throughput, especially on the half-duplex side. It is a classic physical/link layer performance problem.

Answer

Incorrect VLAN tagging on trunks

Answer

OSPF area mismatch errors

Answer

A change in the subnet mask on the host