CCNA Practice Test 7 — 10 Questions

Question 1

A host is configured with 10.1.1.34/30. Which address is the broadcast address for its subnet?

Accepted Answer

10.1.1.35. A /30 subnet has a block size of 4. In practical terms, the last-octet blocks are 0–3, 4–7, 8–11, and so on. Because 34 falls within the 32–35 block, the broadcast address is the last address in that block: 10.1.1.35.

This question tests whether you can identify the correct subnet block before choosing the broadcast address.

Answer

10.1.1.31

Answer

10.1.1.32

Answer

10.1.1.36

Question 2

Which two statements accurately describe the relationship between a network address and a broadcast address in IPv4 subnetting?

Accepted Answer

The network address is the first address in the subnet block.. The network address identifies the beginning of the subnet block, and the broadcast address identifies the final address in that block. In practical terms, both are reserved and are not assigned to ordinary hosts. The usable host range falls between them.

This is a very basic subnetting truth, but it is foundational for every other addressing calculation.

Answer

Both addresses are normal host addresses that can be assigned to users.

Answer

The broadcast address always becomes the default gateway.

Answer

These concepts exist only in IPv6 and not IPv4.

Question 3

Which static route on R1 sends all unknown IPv4 destinations to next-hop address 192.0.2.1?

Accepted Answer

ip route 0.0.0.0 0.0.0.0 192.0.2.1. A quad-zero route is the IPv4 default route. It matches destinations that do not have a more specific entry in the routing table.

Answer

ip route 0.0.0.0 255.255.255.255 192.0.2.1

Answer

ip route 255.255.255.255 0.0.0.0 192.0.2.1

Answer

ip default-gateway 192.0.2.1

Question 4

An API client sends a valid GET request and receives an HTTP 200 response. What does that indicate?

Accepted Answer

The request was successful. HTTP 200 indicates a successful request. For a GET operation, it generally means the server successfully returned the requested resource representation.

Answer

The resource was deleted successfully

Answer

Authentication permanently failed

Answer

The server requires a reboot

Question 5

Based on the exhibit, what is the most likely reason the PPP link is down?

Accepted Answer

The serial interfaces use different encapsulations.. The PPP link is down because the two ends are configured for different encapsulations. In practical terms, one side is using PPP and the other is using HDLC, so the devices are not speaking the same data-link protocol on the serial link. Until those encapsulations match, the link cannot come up correctly at the data-link layer.

This is a classic WAN troubleshooting pattern that fits well into simulation-style exam coverage.

Answer

PPP requires CAPWAP on both routers.

Answer

The routers must run BGP before PPP can establish.

Answer

Serial links can use only OSPF, not PPP.

Question 6

What is the main purpose of this configuration?

ipv6 route 2001:db8:100::/64 GigabitEthernet0/0

Accepted Answer

It creates a specific IPv6 static route to 2001:db8:100::/64 out GigabitEthernet0/0.. This configuration creates an IPv6 static route to a specific destination prefix through the named outgoing interface. In practical terms, the router is being told exactly how to reach that remote IPv6 network. This is not a default route and not a dynamic-routing statement. It is a manually defined path to one destination prefix.

The key concept is recognizing the difference between a specific static route and a default route.

Answer

It enables OSPFv3 on GigabitEthernet0/0.

Answer

It creates an IPv6 default route.

Answer

It converts the interface into a tunnel.

Question 7

A host is configured with 192.168.10.129/25. Which subnet contains that host?

Accepted Answer

192.168.10.128/25. A /25 divides the /24 into two blocks: 0–127 and 128–255. In practical terms, 192.168.10.129 belongs to the upper half, so the containing subnet is 192.168.10.128/25.

This is a simple subnet-boundary question, but it is designed to confirm that you can identify the correct half of the /24 quickly and confidently.

Answer

192.168.10.0/25

Answer

192.168.10.64/25

Answer

192.168.10.192/25

Question 8

A security team wants device administrators to log in with individual named accounts instead of sharing one generic admin account. Which security objective does that most directly improve?

Accepted Answer

Accountability for administrative actions. It most directly improves accountability. In practical terms, when each administrator has an individual account, the organization can tie actions to specific people rather than to one shared identity. That makes investigation, auditing, and operational review much more meaningful.

This also supports better access-control hygiene overall, but the clearest direct benefit is being able to identify who actually performed an administrative action.

Answer

Automatic VLAN assignment for management traffic

Answer

Route summarization efficiency

Answer

Wireless roaming performance

Question 9

An engineer is allowed to log in to a router but cannot enter configuration mode. Which AAA function most directly explains that outcome?

Accepted Answer

Authorization. Authorization most directly explains the outcome. In practical terms, the user has already passed authentication because login succeeded, but the permissions assigned to that identity do not allow configuration-level actions. This is exactly the sort of role separation authorization is meant to enforce.

This is a good example of why authentication and authorization are not the same thing.

Answer

Authentication

Answer

Accounting

Answer

DNS

Question 10

A host is configured as 10.20.30.95/27. Which address is the network address of its subnet?

Accepted Answer

10.20.30.64. A /27 uses blocks of 32 addresses. In plain language, the ranges in the last octet are 0–31, 32–63, 64–95, 96–127, and so on. Since the host address ends in 95, it belongs to the 64–95 block. The first address in that block is the network address, which is 10.20.30.64.

This is a classic subnet-boundary question because it tests whether you can identify the containing block and then choose the first address in that block as the network address.

Answer

10.20.30.32

Answer

10.20.30.95

Answer

10.20.30.96