CCNA Mock Exam 72 — 25 Questions

Question 1

Drag and drop the following steps into the correct order to capture and analyze traffic on IOS-XE using the embedded packet capture feature, then export to Wireshark to isolate a Layer 2 or Layer 3 fault.

Accepted Answer

Enter privileged EXEC mode, define the capture buffer, specify the interface and direction, start the capture, stop the capture, export the capture to a .pcap file, transfer the file, and analyze in Wireshark.. First enter privileged mode, then define the capture buffer, specify the interface and direction, start the capture, stop it after collecting data, export to a .pcap file, then transfer and analyze in Wireshark.

Answer

Enter global configuration mode, define the capture buffer, specify the interface and direction, start the capture, stop the capture, export the capture to a .pcap file, transfer the file, and analyze in Wireshark.

Answer

Enter privileged EXEC mode, specify the interface and direction, define the capture buffer, start the capture, stop the capture, export the capture to a .pcap file, transfer the file, and analyze in Wireshark.

Answer

Enter privileged EXEC mode, define the capture buffer, specify the interface and direction, start the capture, export the capture to a .pcap file, stop the capture, transfer the file, and analyze in Wireshark.

Question 2

Drag and drop the following steps into the correct order to describe the routing table lookup process when a router receives a packet destined for 192.168.1.100, from destination IP match to forwarding decision.

Accepted Answer

Match destination IP to routing table entries. The routing table lookup process begins with matching the destination IP, then longest prefix match, determining next-hop, resolving Layer 2 address, and finally forwarding the packet.

Question 3

Drag and drop the following OSPFv2 neighbor state transitions and DR/BDR election steps into the correct order for a multi-access network where a new router joins an existing OSPF area.

Accepted Answer

Down -> Init -> 2-Way -> ExStart -> Exchange -> Loading -> Full. The new router first discovers neighbors via Hello. Then DD, LSR, LSU exchange synchronizes databases. DR/BDR election happens before Full state is achieved.

Answer

Down -> Init -> 2-Way -> ExStart -> Exchange -> Full -> Loading

Answer

Down -> Init -> ExStart -> 2-Way -> Exchange -> Loading -> Full

Answer

Down -> Init -> 2-Way -> Exchange -> ExStart -> Loading -> Full

Question 4

Drag and drop the following steps into the correct order to configure an LACP EtherChannel on two Cisco switches using active mode.

Accepted Answer

Create the port-channel interface, configure its properties, then assign physical interfaces with channel-group active mode.. First create the logical port-channel interface and configure its properties, then assign physical interfaces to it using channel-group with active mode to initiate LACP negotiation.

Answer

Assign physical interfaces with channel-group active mode, then create the port-channel interface and configure its properties.

Answer

Configure physical interfaces with channel-group passive mode, then create the port-channel interface.

Answer

Create the port-channel interface, assign physical interfaces with channel-group desirable mode, then configure properties.

Question 5

Drag and drop the following steps into the correct order to configure Root Guard on designated ports, Loop Guard on non-designated ports, and BPDU Guard on PortFast ports, and to recover a port that enters err-disabled due to a BPDU guard violation.

Accepted Answer

1. Configure Root Guard on designated ports. 2. Configure Loop Guard on non-designated ports. 3. Configure BPDU Guard on PortFast ports. 4. To recover a port that enters err-disabled due to BPDU Guard violation, manually shut and no shut the interface.. Root Guard on designated, Loop Guard on non-designated, then BPDU Guard on PortFast; recovery requires interface reset after violation.

Answer

1. Configure BPDU Guard on PortFast ports. 2. Configure Loop Guard on non-designated ports. 3. Configure Root Guard on designated ports. 4. To recover a port that enters err-disabled due to BPDU Guard violation, re-enable BPDU Guard on the port.

Answer

1. Configure Loop Guard on non-designated ports. 2. Configure Root Guard on designated ports. 3. Configure BPDU Guard on PortFast ports. 4. To recover a port that enters err-disabled due to BPDU Guard violation, configure errdisable recovery cause bpduguard.

Answer

1. Configure Root Guard on designated ports. 2. Configure BPDU Guard on PortFast ports. 3. Configure Loop Guard on non-designated ports. 4. To recover a port that enters err-disabled due to BPDU Guard violation, remove BPDU Guard from the port.

Question 6

Drag and drop the following steps into the correct order to plan, configure, and apply an extended ACL that denies Telnet from a specific host to a server subnet, then verify the configuration.

Accepted Answer

Enter global configuration mode, create the extended ACL with the deny statement for Telnet from the specific host to the server subnet, then permit other traffic.. The correct sequence is: create the ACL (A), apply it to the interface (B), verify it works (D), then save the configuration (C). This prevents saving a faulty ACL. Verifying after saving (C before D) risks persisting errors and is not the Cisco recommended workflow.

Question 7

Drag and drop the following steps into the correct order to configure a DHCP server on a Cisco IOS-XE router and enable DHCP relay on a remote subnet, following Cisco's recommended configuration sequence.

Accepted Answer

1. Create DHCP pool with network and default-router. 2. Exclude addresses. 3. Enable DHCP relay on the remote interface.. The recommended order is to first create the DHCP pool with network and default-router, then exclude addresses, and finally enable DHCP relay on the remote interface. While the 'ip dhcp excluded-address' command can technically be issued before or after the pool definition, Cisco documentation typically shows the pool created first. The critical requirement is that DHCP relay is configured last, after the DHCP server is fully configured. Options B and D place relay first, which is incorrect.

Question 8

Drag and drop the following steps into the correct order to configure an LACP EtherChannel on Cisco IOS-XE switches.

Accepted Answer

Enter global configuration mode, create the port-channel interface, configure channel-group mode active on each physical interface, verify the configuration.. First, enter global config mode. Then create the port-channel interface. Next, configure the channel-group mode on each physical interface to active for LACP. Finally, verify the configuration.

Answer

Create the port-channel interface, enter global configuration mode, configure channel-group mode active on each physical interface, verify the configuration.

Answer

Enter global configuration mode, configure channel-group mode active on each physical interface, create the port-channel interface, verify the configuration.

Answer

Create the port-channel interface, configure channel-group mode active on each physical interface, enter global configuration mode, verify the configuration.

Question 9

Drag and drop the following OSPFv2 neighbor state transitions into the correct order, starting from the initial state when no neighbor information has been received.

Accepted Answer

Down, Init, 2-Way, ExStart, Exchange. OSPF neighbor states begin at Down, then Init after receiving Hello, 2-Way after seeing own router ID, ExStart for master/slave negotiation, and Exchange for exchanging database descriptors.

Answer

Down, 2-Way, Init, ExStart, Exchange

Answer

Down, Init, ExStart, 2-Way, Exchange

Answer

Down, Init, 2-Way, Exchange, ExStart

Question 10

Drag and drop the configuration steps into the correct order to configure Port Address Translation (PAT) on a Cisco router.

Accepted Answer

Define interesting traffic using an access list to identify the internal source addresses to be translated.. The correct sequence is: first define the addresses to translate with an access list; next mark the inside interface with 'ip nat inside'; then mark the outside interface with 'ip nat outside'; finally, enable PAT globally with the 'ip nat inside source list ... overload' command. The overload command is not applied to an interface—it references the outside interface to translate source addresses to that interface’s IP.

Question 11

Drag and drop the following steps into the correct order to describe the router's routing table lookup process for a destination IP address, including the best-path selection logic (longest prefix match, then administrative distance, then metric) and the final forwarding decision.

Accepted Answer

1. Perform longest prefix match on destination IP address
2. If multiple routes match, compare administrative distance
3. If AD is equal, compare metric
4. Forward packet using the best route. The router applies longest prefix match first, then administrative distance, then metric, in that order, to select the best path and forward the packet.

Answer

1. Compare administrative distance of all routes
2. Compare metric of routes with lowest AD
3. Perform longest prefix match on remaining routes
4. Forward packet using the best route

Answer

1. Compare metric of all routes
2. Compare administrative distance of routes with lowest metric
3. Perform longest prefix match on remaining routes
4. Forward packet using the best route

Answer

1. Perform longest prefix match on destination IP address
2. If multiple routes match, compare metric
3. If metric is equal, compare administrative distance
4. Forward packet using the best route

Question 12

Drag and drop the following steps into the correct order to configure PAT (Port Address Translation) on a Cisco IOS-XE router for outbound traffic from a private network to the Internet.

Accepted Answer

Enter global configuration mode, define an ACL to match private traffic, specify the outside interface, and apply ip nat inside source list ACL interface outside overload.. PAT configuration requires first entering global config, defining the traffic with an ACL, specifying the outside interface, then applying the NAT overload command referencing the ACL and outside interface.

Question 13

Drag and drop the following steps into the correct order to describe the router's routing table lookup process from receiving a packet with a destination IP address to making the forwarding decision, including best-path selection criteria.

Accepted Answer

Packet arrival, longest prefix match, tie-breaking using administrative distance and metric, forwarding decision. The process starts with packet arrival, then longest prefix match, followed by tie-breaking using administrative distance and metric, culminating in forwarding.

Answer

Packet arrival, tie-breaking using administrative distance and metric, longest prefix match, forwarding decision

Answer

Packet arrival, longest prefix match, forwarding decision, tie-breaking using administrative distance and metric

Answer

Packet arrival, tie-breaking using administrative distance and metric, forwarding decision, longest prefix match

Question 14

Drag and drop the following steps into the correct order to configure AAA with a RADIUS server and 802.1X port authentication on a Cisco IOS-XE switch.

Accepted Answer

Enter global configuration mode, enable AAA globally, configure RADIUS server parameters, define an authentication method list, then enable 802.1X on the interface.. The correct order for AAA with RADIUS and 802.1X is: global config, enable AAA, configure RADIUS server, define authentication method list, then enable 802.1X on the interface.

Answer

Enter global configuration mode, configure RADIUS server parameters, enable AAA globally, define an authentication method list, then enable 802.1X on the interface.

Answer

Enter global configuration mode, enable AAA globally, define an authentication method list, configure RADIUS server parameters, then enable 802.1X on the interface.

Answer

Enter global configuration mode, enable AAA globally, configure RADIUS server parameters, enable 802.1X on the interface, then define an authentication method list.

Question 15

Drag and drop the following steps into the correct order to configure PortFast and BPDU Guard on a Cisco switch interface, then recover from a BPDU guard violation.

Accepted Answer

Enter interface configuration mode for the desired port, then configure spanning-tree portfast and spanning-tree bpduguard enable, then exit. After a BPDU guard violation, re-enable the interface using the shutdown and no shutdown commands.. The correct configuration sequence applies PortFast and BPDU Guard directly in interface configuration mode with 'spanning-tree portfast' and 'spanning-tree bpduguard enable'. After a BPDU guard violation disables the port, manual recovery requires re-enabling the interface with 'shutdown' followed by 'no shutdown' (or configuring errdisable recovery). The other options incorrectly use global defaults, Root Guard, or false automatic recovery intervals.

Question 16

Which three of the following correctly describe the behavior of EtherChannel? (Choose three.)

Accepted Answer

It aggregates multiple physical links into a single logical link.. EtherChannel aggregates multiple physical links into a single logical link, increasing bandwidth and providing redundancy. It uses a hash algorithm (based on source/destination MAC, IP, or TCP/UDP ports) to distribute traffic across member links. All member ports must have identical speed and duplex settings and be on the same switch (or stack). The statement that EtherChannel allows multiple VLANs only if configured as an access port is false because EtherChannel links can operate as trunks to carry multiple VLANs.

Answer

It requires that member ports be on different switches to form a single channel.

Answer

It increases the total number of STP instances in the network.

Answer

It allows multiple VLANs on the same link only if configured as an access port.

Question 17

Which three of the following are true regarding the forwarding decision process in a router? (Choose three.)

Accepted Answer

The router performs a recursive route lookup if the next-hop address in a static route is not directly connected.. A router performs a recursive route lookup when the next-hop address in a static route is not directly connected, meaning the router must find a route to that next-hop address before forwarding. The Forwarding Information Base (FIB) is used in Cisco Express Forwarding (CEF) mode to provide fast, hardware-based packet switching by pre-populating the forwarding table from the routing table. When a packet arrives, the router first checks the routing table (RIB) for the best matching route, which is the longest prefix match, to determine the next-hop and outgoing interface.

Answer

If the destination IP is on the same subnet as an interface, the router forwards the packet directly without checking the routing table.

Answer

The router always performs an ARP request for every destination IP address in a packet.

Answer

The router rewrites the source MAC address to the MAC address of the next-hop router for every forwarded packet.

Question 18

Which four of the following are characteristics or configuration requirements of NTP client/server operation in a secure enterprise network? (Choose all that apply. There are four correct answers.)

Accepted Answer

An NTP client can synchronize time with multiple NTP servers for redundancy.. NTP clients can synchronize with multiple servers to provide redundancy and improve accuracy through algorithms like Marzullo's algorithm. NTP uses UDP port 123 for all communication, as specified in RFC 5905. NTP authentication (using symmetric keys or MD5 hashes) ensures that time updates originate from a trusted source, preventing spoofing attacks. The stratum level indicates the distance from the primary reference clock; a lower stratum number (e.g., 1) is closer to the authoritative time source and thus more accurate.

Answer

The NTP server must be in the same subnet as the NTP client to synchronize.

Answer

A Cisco device configured as an NTP server will automatically become the stratum 1 server for all clients.

Question 19

Which four of the following statements about IPv4 static routing are true? (Choose all that apply. There are four correct answers.)

Accepted Answer

A default static route uses 0.0.0.0/0 as the destination network.. A default static route with destination 0.0.0.0/0 matches all packets when no more specific route exists, acting as a gateway of last resort. A floating static route uses a higher administrative distance (e.g., 150) than the dynamic protocol's default (e.g., 110 for OSPF), so it only appears in the routing table if the dynamic route fails. A fully specified static route includes both the exit interface and next-hop IP, eliminating recursive lookups. A recursive static route specifies only the next-hop IP, forcing the router to perform multiple routing table lookups to find the exit interface.

Answer

A static route pointing to a next-hop IP address only is resolved through ARP on the router.

Answer

An IPv4 static route can use an IPv6 address as the next hop.

Question 20

Which three of the following are key applications of AI in network operations? (Choose three.)

Accepted Answer

Anomaly detection and proactive threat identification. AI in network operations enhances efficiency by automating complex analytical tasks. Anomaly detection uses machine learning models to identify deviations from baseline traffic patterns, enabling proactive threat identification before they cause outages. Automated root cause analysis correlates events across the network to pinpoint the origin of a fault, reducing mean time to repair (MTTR). Predictive maintenance leverages telemetry data (e.g., from SNMP, NetFlow, or gRPC) to forecast hardware failures, allowing preemptive replacement and minimizing downtime.

Answer

Replacing all manual CLI configuration with AI-generated scripts

Answer

Eliminating the need for network monitoring tools entirely

Answer

Automating the physical installation of network cables