CCNA Mock Exam 84 — 25 Questions

Question 1

Match each VLAN or trunk term to its most accurate purpose.

Accepted Answer

Trunk: Carries traffic for multiple VLANs over a single link.. Trunks enable multiple VLANs on one link; VLANs logically segment networks. 802.1Q is the tagging standard; native VLAN is untagged. VTP distributes VLAN database; inter-VLAN routing uses a router or Layer 3 switch to communicate between VLANs.

Answer

VLAN: Provides a method to tag frames for multiple VLANs on a trunk.

Answer

Native VLAN: Used to route traffic between different VLANs.

Answer

802.1Q: Distributes VLAN configuration information across switches.

Question 2

Match each Layer 2 protection feature to its most accurate purpose.

Accepted Answer

Storm Control: Limits excessive broadcast, multicast, or unicast traffic to prevent network storms.. Storm Control limits excessive traffic. Port Security limits MAC addresses. DHCP Snooping blocks unauthorized DHCP servers. DAI validates ARP packets. IP Source Guard filters IP traffic based on DHCP snooping. 802.1X authenticates devices before granting access.

Answer

Storm Control: Authenticates devices before granting network access.

Answer

Storm Control: Validates ARP packets to prevent ARP spoofing attacks.

Answer

Storm Control: Filters IP traffic based on DHCP snooping bindings.

Question 3

Match each remote-management concept to its most accurate description.

Accepted Answer

Telnet: Unencrypted remote access to network devices. Remote management methods vary in security and functionality: Telnet is unencrypted, SSH is encrypted, RDP is for Windows desktops, VNC is platform-independent, console provides direct access, and serial is a physical connection method.

Answer

SSH: Encrypted remote access to network devices

Answer

RDP: Remote access to Windows desktops with GUI

Answer

Console: Physical serial connection for out-of-band management

Question 4

Match each OSPF adjacency requirement or concept to its most accurate description.

Accepted Answer

Neighbor discovery uses Hello packets to establish and maintain adjacencies.. Hello/Dead timers must match between neighbors to form a stable OSPF adjacency; mismatched timers cause neighbor relationships to fail. Area must be identical on the shared OSPF segment because routers in different areas do not establish full adjacencies. Router ID uniquely identifies the router within the OSPF process, used for DR/BDR election and LSA origination. Passive interface suppresses hello packets, preventing neighbor formation on that link, while still allowing the connected network to be advertised via the router's LSA.

Answer

DR/BDR election reduces the number of LSAs flooded in a broadcast multiaccess network.

Answer

LSA flooding is the process by which OSPF routers exchange link-state information to build a common topology database.

Answer

The SPF algorithm is used to compute the shortest path to each destination based on the link-state database.

Question 5

Match each routing concept to its most accurate meaning.

Accepted Answer

Administrative Distance is a measure of the trustworthiness of a routing information source, such as a routing protocol or a static route.. Administrative Distance measures route source trustworthiness; Metric determines best path within a protocol; Convergence is the time to reach consistent routing; Route Summarization reduces routing table size; Floating Static Route acts as a backup; ECMP enables load balancing.

Answer

Administrative Distance is the metric used by a routing protocol to determine the best path within that protocol.

Answer

Administrative Distance is the time it takes for a routing protocol to converge after a network change.

Answer

Administrative Distance is the number of hops a packet takes to reach its destination.

Question 6

Match each NAT or address-related term to its most accurate description.

Accepted Answer

A one-to-one mapping between a private IP address and a public IP address, configured manually and remaining constant.. Inside local is the private IP address assigned to a host inside the internal network. Inside global is the public IP address that represents that internal host to external networks. Static NAT creates a permanent one-to-one mapping between an inside local and an inside global address. PAT (Port Address Translation) extends NAT by using port numbers to map multiple inside local addresses to a single inside global address.

Answer

A many-to-one mapping where multiple private IP addresses share a single public IP address, distinguished by port numbers.

Answer

A dynamic mapping where private IP addresses are translated to public IP addresses from a pool, without port translation.

Answer

A special IP address (127.0.0.1) used by a host to send traffic to itself for testing and loopback purposes.

Question 7

Match each operations term to its most accurate meaning.

Accepted Answer

SLA (Service Level Agreement). Polling matches 'Repeated collection of data by the management system' because an NMS periodically requests data from devices (SNMP Get/GetNext). Traps are event notifications sent by the device without a prior request. Syslog severity indicates the importance of a logged event (0=emergency to 7=debug). NetFlow provides visibility into traffic flows by collecting metadata about communications between endpoints.

Answer

MTTR (Mean Time to Repair)

Answer

MTBF (Mean Time Between Failures)

Answer

RTO (Recovery Time Objective)

Question 8

Match each ACL-related term to its most accurate description.

Accepted Answer

Standard ACL. Standard ACLs use source IP only; extended ACLs use more criteria. Named ACLs use names; inbound/outbound specify direction. Implicit deny is the default deny-all at the end of any ACL.

Answer

Extended ACL

Answer

Named ACL

Answer

Implicit deny

Question 9

Match each management-plane security item to its most accurate purpose.

Accepted Answer

SSH encrypts remote access to prevent eavesdropping and unauthorized command interception.. SSH provides encrypted remote administration, ensuring confidentiality of management traffic. AAA is a framework that handles authentication, authorization, and accounting for user access. Syslog enables centralized logging and event visibility from network devices. ACLs can filter traffic and be used to restrict which source IPs are allowed for management access. Each item directly maps to its described purpose without overlapping concepts.

Answer

AAA manages authentication, authorization, and accounting to control user access and track activities.

Answer

ACLs filter traffic to permit or deny packets based on IP addresses and protocols.

Answer

RBAC restricts commands to specific users based on roles to enforce least privilege.

Question 10

Drag and drop the EtherChannel commands and concepts on the left to the correct descriptions on the right.

Accepted Answer

active. EtherChannel modes: active/passive for LACP, desirable/auto for PAgP, on for static, and interface port-channel creates the logical interface.

Answer

desirable

Answer

auto

Answer

on

Question 11

Match each security concept to its most accurate role.

Accepted Answer

Confidentiality ensures that data is accessible only to authorized users, typically through encryption.. Confidentiality, integrity, and availability are the CIA triad. Authentication verifies identity, authorization grants permissions, and accounting logs actions.

Answer

Integrity ensures that data is accurate and unaltered, typically through hashing or checksums.

Answer

Availability ensures that systems and data are accessible when needed, typically through redundancy and backups.

Answer

Authentication verifies the identity of a user or device, typically through passwords or certificates.

Question 12

Drag and drop the IPv4/IPv6 static routing concepts on the left to the correct descriptions on the right.

Accepted Answer

Default route. Each command matches its description as follows: "ip route 0.0.0.0 0.0.0.0 serial0/0/0" is an IPv4 default static route because it uses all-zeros network and mask to match any destination and specifies an exit interface. "ipv6 route ::/0 serial0/0/0" is an IPv6 default static route for the same reason with IPv6. "ip route 10.0.0.0 255.0.0.0 192.168.1.1 200" sets an administrative distance of 200, making it a floating static route that serves as a backup when the primary route fails. "ip route 10.0.0.0 255.0.0.0 192.168.1.1" is a standard static route pointing to a next-hop IP with a specific destination. "ipv6 route 2001:db8::/32 2001:db8:1::1" is a standard IPv6 static route. "ip route 10.0.0.0 255.0.0.0 null0" creates a summary static route (also called a discard route) that drops traffic matching the aggregate to prevent routing loops.

Answer

Summary route

Answer

Floating route

Answer

Recursive route

Question 13

Match each service to the kind of problem it most directly helps solve.

Accepted Answer

DNS - remembering IP addresses; DHCP - manual IP configuration; FTP - file transfers; SSH - encrypted remote access; RADIUS - network access; TACACS+ - device administration. DNS solves the problem of remembering IP addresses. DHCP eliminates manual IP configuration. FTP enables file transfers. SSH provides encrypted remote access. RADIUS and TACACS+ are AAA protocols, with RADIUS commonly used for network access and TACACS+ for device administration.

Answer

DNS - file transfers; DHCP - encrypted remote access; FTP - remembering IP addresses; SSH - manual IP configuration; RADIUS - device administration; TACACS+ - network access

Answer

DNS - encrypted remote access; DHCP - file transfers; FTP - manual IP configuration; SSH - remembering IP addresses; RADIUS - device administration; TACACS+ - network access

Answer

DNS - manual IP configuration; DHCP - remembering IP addresses; FTP - encrypted remote access; SSH - file transfers; RADIUS - network access; TACACS+ - device administration

Question 14

Match each security concept to its description.

Accepted Answer

AAA (Authentication, Authorization, and Accounting). Authentication is the process of verifying that the user or device is who they claim to be, which matches 'Verifies identity'. Authorization determines what actions an authenticated entity is allowed to perform, matching 'Determines permitted actions'. Accounting tracks and records the activities of authenticated users, corresponding to 'Records activity'. Least privilege grants only the minimum access needed for a task, aligning with 'Grants only required access'. These are foundational security principles for access control.

Answer

ACL (Access Control List)

Answer

Port Security

Answer

DHCP Snooping

Question 15

Drag and drop the following steps into the correct order for an agentic AI system that receives a network intent, decomposes it into sub-tasks, calls tools, validates output, and applies closed-loop remediation.

Accepted Answer

Receive network intent. The agentic AI system starts by understanding the intent, then splits it into manageable tasks, invokes tools, checks the outcome, and corrects any issues automatically.

Answer

Decompose intent into sub-tasks

Answer

Call tools to execute sub-tasks

Answer

Validate output and apply closed-loop remediation

Question 16

Match each HTTP method to its common REST API action.

Accepted Answer

GET - Retrieve data. GET retrieves data; POST creates; PUT replaces; PATCH partially updates; DELETE removes; OPTIONS queries available methods.

Answer

GET - Create data

Answer

POST - Retrieve data

Answer

PUT - Partially update data

Question 17

Drag and drop the cable or transceiver types on the left to the corresponding distance limits or characteristics on the right.

Accepted Answer

1000BASE-T: 100 meters. These pairings match common Ethernet cable and transceiver types to their standard maximum distances. Cat5e UTP (1000BASE-T) and Cat6a UTP (10GBASE-T) both support 100 meters at their respective speeds, limited by copper signal attenuation. Multimode fiber with SFP+ SR (10GBASE-SR) distance depends on fiber grade: 300 meters on OM3, 400 meters on OM4; the CCNA often uses 300 meters, but 400 meters is valid for OM4. Single-mode fiber with SFP+ LR (10GBASE-LR) supports 10 kilometers, using longer wavelength lasers. SFP (1000BASE-LX) over single-mode fiber reaches 5 kilometers, a standard distance for Gigabit Ethernet over SMF.

Answer

1000BASE-SX: 550 meters

Answer

1000BASE-LX: 5 kilometers

Answer

1000BASE-ZX: 70 kilometers

Question 18

Drag and drop the AAA and 802.1X terms on the left to the correct descriptions on the right.

Accepted Answer

Authentication: Verifies the identity of the user or device attempting to access the network.. AAA components: authentication verifies identity, authorization grants rights, accounting logs activities. 802.1X roles: supplicant is the client, authenticator is the switch/AP, and authentication server (RADIUS) validates and authorizes.

Answer

Authorization: Determines what resources the authenticated user or device is allowed to access.

Answer

Accounting: Logs and tracks user activities, such as login times, commands executed, and data transferred.

Answer

Supplicant: The client device that requests network access and provides credentials to the authenticator.

Question 19

Match each REST-style method to the action it most commonly represents.

Accepted Answer

GET - Retrieve, POST - Create, PUT - Replace, PATCH - Partial Modify, DELETE - Remove, HEAD - Headers only. REST methods are standardized: GET retrieves, POST creates, PUT replaces, PATCH partially modifies, DELETE removes, and HEAD retrieves only headers.

Answer

GET - Retrieve, POST - Update, PUT - Create, PATCH - Delete, DELETE - Replace, HEAD - Headers only

Answer

GET - Retrieve, POST - Create, PUT - Update, PATCH - Replace, DELETE - Remove, HEAD - Headers only

Answer

GET - Retrieve, POST - Create, PUT - Replace, PATCH - Update, DELETE - Remove, HEAD - Headers only

Question 20

Drag and drop the OSPFv2 commands on the left to their correct descriptions on the right.

Accepted Answer

router ospf 1. The `network 10.0.0.0 0.255.255.255 area 0` command activates OSPF on any interface with an IP in the 10.0.0.0/8 range (wildcard mask 0.255.255.255) and assigns it to area 0. `router-id 1.1.1.1` manually overrides the default router ID selection, ensuring a persistent OSPF identifier. `passive-interface g0/0` suppresses OSPF hello packets on that interface, so no neighbors are formed but the connected subnet is still advertised. `neighbor 192.168.1.2` statically defines an OSPF neighbor IP for non-broadcast networks where multicast hellos cannot reach the peer. `show ip ospf neighbor` is an EXEC command that displays the current neighbor adjacency table, including neighbor state and interface. `clear ip ospf process` resets all OSPF processes, forcing router ID re-election and full re-adjacency.

Answer

network 10.0.0.0 0.255.255.255 area 0

Answer

area 0 stub

Answer

default-information originate