CCNA Practice Exam 70 — 20 Questions

Question 1

Match each route type to its description.

Accepted Answer

Default route: A route used when no other specific route matches the destination.. Connected routes are automatically generated when a router interface is configured and active because the network is directly attached. Static routes are manually configured by an administrator to define specific paths. Dynamic routes are learned through routing protocols like OSPF or EIGRP. Default routes serve as a catch-all entry, used when no more specific route matches the destination.

Question 2

Match each route-selection concept to its most accurate meaning.

Accepted Answer

Administrative distance: A measure of the trustworthiness of a routing protocol.. Administrative distance indicates the trustworthiness of a routing protocol or static route, with lower values preferred. Metric is a protocol-specific cost used to compare routes from the same source. The longest-prefix match selects the route with the most specific (longest) subnet mask. A floating static route serves as a backup by using a higher administrative distance than the primary route.

Question 3

Drag and drop the wireless LAN terms on the left to their correct descriptions on the right.

Accepted Answer

SSID: The network name broadcast by a wireless access point.. 802.11ac is a wireless standard that operates exclusively in the 5 GHz band and supports MU-MIMO, matching that description. 802.11ax (Wi-Fi 6) introduces OFDMA and works in both 2.4 GHz and 5 GHz, so it correctly pairs with that description. WPA3 uses Simultaneous Authentication of Equals (SAE) to protect against offline dictionary attacks, making it the right match. The SSID is defined as a 32-character alphanumeric name identifying a wireless network, which directly matches. Channel overlap refers to interference from partially overlapping frequency ranges, exactly as described. WLC management access methods include SSH, HTTP/HTTPS, and SNMP, fitting the given description.

Question 4

Match each operational symptom to the technology most likely associated with investigating it.

Accepted Answer

High CPU utilization on router: Routing protocol issues or excessive routing updates.. Syslog is specifically designed to collect device-generated log messages, including warnings and interface state changes, making it the natural tool for reviewing such events. SNMP allows a management station to actively poll device data such as interface counters and operational status, providing real-time statistics and alerts. NetFlow exports flow-level records that detail source, destination, and application conversations, enabling identification of the specific flows consuming bandwidth. NTP synchronizes the clocks of network devices, ensuring that timestamps in logs, alerts, and flow data are consistent across the network for accurate correlation and troubleshooting.

Question 5

Match each WAN or edge concept to its most accurate description.

Accepted Answer

SD-WAN: A software-defined approach to managing wide-area networks, enabling centralized control and traffic optimization.. These matches reflect foundational WAN and edge concepts: PPP is a Layer 2 point-to-point encapsulation used on serial links, PPPoE extends PPP’s authentication and session behavior to Ethernet-based access networks, GRE is a simple tunneling protocol that can encapsulate various protocols for transport across another network, and eBGP exchanges routing information between different autonomous systems, which is essential for internet connectivity.

Answer

MPLS: A protocol that uses labels to forward packets, providing secure encrypted tunnels over the internet.

Answer

VPN: A technology that creates a secure, encrypted tunnel over a public network, such as the internet.

Answer

Edge computing: A model where data processing occurs in a centralized cloud data center to reduce latency.

Question 6

Match each service to the problem it most directly helps solve.

Accepted Answer

DHCP: Automatically assigns IP addresses to devices, solving manual configuration.. DNS resolves hostnames to IP addresses, so without it users can reach servers by IP but not by hostname. DHCP automatically assigns IP addresses, so without it hosts do not receive addressing automatically. NTP synchronizes clocks across devices, so without it logs from different devices show inconsistent time stamps. Syslog forwards event messages to a central server, solving the need for centralized event logging.

Question 7

Match each switch security or protection feature to its most accurate purpose.

Accepted Answer

Port Security: Limits the number of MAC addresses allowed on a switch port to prevent MAC flooding attacks.. Each security feature protects against specific threats: port security limits MAC addresses, DHCP snooping blocks rogue DHCP servers, DAI validates ARP, storm control limits traffic storms, root guard enforces STP root placement, and BPDU guard protects against rogue BPDUs on access ports.

Answer

Port Security: Prevents unauthorized users from connecting to the network by blocking all traffic from unknown MAC addresses.

Answer

Port Security: Prevents DHCP starvation attacks by limiting the number of DHCP requests per second.

Answer

Port Security: Prevents ARP spoofing attacks by validating ARP packets on a port.

Question 8

Match each automation concept to its most accurate description.

Accepted Answer

Idempotency: Running the same operation multiple times yields the same result. Controller provides centralized management and policy enforcement across network devices. API (Application Programming Interface) defines a standardized software interface for communication between systems. REST (Representational State Transfer) is an architectural style that commonly uses HTTP methods like GET, POST, PUT, DELETE. JSON (JavaScript Object Notation) is a lightweight, human-readable data format used for data interchange. Each pairing correctly matches the concept to its core characteristic.

Question 9

Match each infrastructure service to the operational problem it most directly addresses.

Accepted Answer

DNS: Resolves domain names to IP addresses. DNS resolves names; DHCP assigns IPs; NTP syncs time; SNMP monitors devices; Syslog centralizes logs; NetFlow analyzes traffic.

Answer

DNS: Assigns IP addresses to hosts dynamically

Answer

DNS: Synchronizes time across network devices

Answer

DNS: Monitors network device health and performance

Question 10

Drag and drop the following steps into the correct order to sequence the TCP three-way handshake between a client and server.

Accepted Answer

Client sends SYN to server. The three-way handshake starts with SYN, then SYN-ACK, then ACK, after which the connection is established and data can flow.

Question 11

Match each troubleshooting command focus to what it most directly helps verify.

Accepted Answer

ping: Network connectivity between hosts. 'show ip route' directly displays the routing table, allowing verification of known routes and next-hop paths. 'show ip ospf neighbor' shows OSPF neighbor relationships and their states, confirming adjacency formation. 'show interfaces trunk' reveals trunk status, encapsulation, and allowed VLANs on a trunk link. 'show etherchannel summary' lists all EtherChannel bundles, their member ports, and the bundle's operational status. Each command targets a distinct verification area: routing table contents, OSPF neighbor adjacencies, trunk forwarding details, and EtherChannel bundle status.

Question 12

Which of the following shows the correct order of steps to troubleshoot a suspected duplex mismatch and CRC errors on a Cisco IOS-XE interface?

Accepted Answer

Enter global configuration mode, then interface configuration mode for the affected interface, set duplex to full and speed to match the connected device, exit configuration mode, and verify the interface status.. The proper troubleshooting flow requires moving through the correct configuration hierarchy: from privileged EXEC mode you first enter global configuration mode. Then you specify the affected interface to enter interface configuration mode, where the duplex and speed settings are applied. After making the changes, you exit all configuration modes back to privileged EXEC and use show commands to verify the interface status. Option A follows this exact sequence. Option B is wrong because it tries to enter interface configuration without global config. Option C mistakenly attempts to set duplex/speed globally, which is not allowed. Option D not only omits global config but also exits to the wrong mode, leaving you in global configuration instead of privileged EXEC for verification.

Answer

Enter interface configuration mode directly, set duplex and speed, then exit to privileged EXEC mode and verify the interface status.

Answer

Enter global configuration mode, set duplex and speed globally, then exit and verify the interface status.

Answer

Enter interface configuration mode, set duplex and speed, then exit to global configuration mode and verify the interface status.

Question 13

Match each service to the issue it most directly addresses.

Accepted Answer

DNS: Resolves domain names to IP addresses. Each service directly addresses a specific network issue: DNS resolves names, DHCP assigns IPs, NTP syncs time, SNMP manages devices, Syslog collects logs, and NetFlow analyzes traffic.

Answer

DHCP: Synchronizes time across network devices

Answer

NTP: Collects and stores system logs

Answer

SNMP: Analyzes network traffic flows

Question 14

Match each security control idea to its most accurate purpose.

Accepted Answer

Firewall: Filters traffic based on security rules.. Least privilege restricts users and processes to only the access rights necessary for their tasks, reducing the attack surface. SSH provides encrypted remote management, preventing eavesdropping and credential theft during administrative sessions. BPDU Guard immediately disables an edge port if a BPDU is received, safeguarding the network from unauthorized switches and potential loops. Port security limits the number and identity of allowed MAC addresses on a switch port, blocking MAC flooding and unauthorized device access.

Answer

Firewall: Detects and blocks malicious traffic patterns using signatures.

Answer

Firewall: Prevents data loss by monitoring outbound traffic for sensitive data.

Answer

Firewall: Protects web applications from attacks like SQL injection.

Question 15

Match each programmability term to its most accurate meaning.

Accepted Answer

Northbound API: Interface between SDN controller and applications. Controller is the centralized management or policy platform that orchestrates network behavior. Northbound API is the application-facing interface that allows applications to communicate with the controller. JSON is a structured data format commonly used to exchange information between network devices and controllers. Token is a credential-like value used to authenticate and authorize access to network resources.

Answer

Southbound API: Interface between SDN controller and network devices

Answer

OpenFlow: Protocol for configuration management of network devices

Answer

NETCONF: Protocol for forwarding plane control in SDN

Question 16

Drag and drop the following steps into the correct order to replace a faulty SFP module on a Cisco switch and verify the fiber interface.

Accepted Answer

Remove the faulty SFP module from the switch port.. The faulty SFP must be removed first, then the new SFP installed, cable connected, and finally verification steps performed to confirm link and transceiver status using 'show interfaces' and 'show interfaces transceiver' commands.

Question 17

Drag and drop the following steps into the correct order (recommended best-practice workflow) to configure VLANs, assign access ports, enable 802.1Q trunking, set the native VLAN, and verify the configuration on a Cisco switch running IOS-XE.

Accepted Answer

Create VLANs globally, assign access ports, configure trunking with native VLAN, verify configuration. First, create VLANs globally so they exist in the VLAN database. Next, assign access ports to the desired VLANs, ensuring end‑device connectivity is established locally. Then configure trunking on the appropriate interfaces, including setting the native VLAN; doing trunking after access port assignment prevents accidental VLAN propagation across the trunk before all access ports are correctly placed. Verification is always the final step to confirm the entire configuration. Option D (VLAN creation → trunking → access ports → verify) is technically functional but violates the best‑practice order because trunking should be configured only after access ports are assigned to avoid potential topology issues.

Question 18

Match each access-control concept to its most accurate meaning.

Accepted Answer

Subject: An entity that requests access to an object.. Authentication is correctly matched with 'Verification of identity' because it confirms who the user is. Authorization is correctly matched with 'Determination of allowed actions' because it defines what the user can do. Least privilege is correctly matched with 'Limiting access to only what is necessary' as it enforces minimal permissions. Local database is correctly matched with 'Credential store used directly on the device' as it stores credentials locally for authentication.

Answer

Subject: A resource or data that is being protected.

Answer

Subject: A set of permissions that define allowed actions.

Answer

Subject: A list of permissions associated with an object.

Question 19

Match each API interaction term to its most accurate description.

Accepted Answer

REST: An architectural style for designing networked applications, using stateless communication and standard HTTP methods.. GET is an HTTP method designed to retrieve data from a server without modifying resources. PUT is an HTTP method used to update or replace an existing resource at a given URI. HTTPS provides encrypted transport for the API exchange, ensuring confidentiality and integrity. A token serves as a credential-like value, often passed in headers, to authenticate and authorize API access.

Answer

REST: A protocol for exchanging structured information in web services, using XML and built-in error handling.

Answer

REST: A data format used to represent objects in API responses, often used with JavaScript.

Answer

REST: A unique identifier for a specific resource on a web server, such as a URL or URN.

Question 20

Drag and drop the following steps into the correct order to describe the TCP three-way handshake between a client and a server.

Accepted Answer

Client sends SYN to server. The TCP three-way handshake starts with the client initiating the connection by sending a SYN, followed by the server acknowledging with SYN-ACK, and finally the client confirming with an ACK. This sequence establishes a reliable connection before data transfer.

Answer

Server sends ACK to client