CCNA Mock Exam 85 — 25 Questions

Question 1

Drag and drop the STP port roles on the left to their descriptions on the right.

Accepted Answer

Root port: Provides the best path to the root bridge from a non-root switch.. In STP/RSTP, root ports provide best path to root; designated ports are the forwarding ports per segment; alternate ports back up root ports; backup ports back up designated ports; blocking ports prevent loops; disabled ports are shut down.

Answer

Designated port: Provides a backup path to the root bridge in case the root port fails.

Answer

Alternate port: Provides a backup path to the root bridge when the root port fails.

Answer

Backup port: Provides a backup path for the root port when the root port fails.

Question 2

Match each DHCPv4 message in the DORA process to its role.

Accepted Answer

Discover: Client broadcasts to locate DHCP servers. The DORA process includes Discover (client broadcast), Offer (server response), Request (client accepts), and Ack (server confirms). Additional messages like NAK and Decline handle errors.

Answer

Discover: Server responds with an IP lease offer

Answer

Discover: Client requests the offered IP address

Answer

Discover: Server acknowledges the lease

Question 3

Match each STP-related feature or term to its most accurate description.

Accepted Answer

Root Bridge: The switch elected as the root of the spanning tree, from which all path costs are calculated.. PortFast moves an access port immediately to forwarding state, skipping listening/learning to speed host connectivity. BPDU Guard protects edge ports by disabling a PortFast port if any BPDU is received, preventing accidental loops. Root Guard ensures a port never becomes a root port by ignoring superior BPDUs, maintaining the intended root bridge placement. Loop Guard keeps non-designated ports in blocking when expected BPDUs are lost, avoiding loops from unidirectional links. The given matches correctly pair each feature to its precise STP behavior, and other descriptions would apply to different features like Root Bridge or Alternate Port, not to these terms.

Answer

BPDUs: Frames that carry STP information, used to elect the root bridge and detect loops.

Answer

PortFast: A feature that immediately transitions a port to forwarding state, bypassing listening and learning, used on access ports.

Answer

Rapid PVST+: Cisco's implementation of RSTP that runs a separate instance of STP per VLAN, providing faster convergence.

Question 4

Match each API workflow concept to the description that best fits it.

Accepted Answer

REST is a stateless architectural style that uses standard HTTP methods and typically exchanges data in JSON or XML format.. In REST API workflows, the endpoint is the URL path that identifies a specific resource (e.g., /users). The HTTP method defines the action to perform on that resource, such as GET (retrieve), POST (create), PUT (update), or DELETE (remove). A token is a credential that the client sends in the request header to authenticate and authorize access, and JSON is the lightweight data‑interchange format used to structure the payload in the request body or response.

Answer

SOAP is a lightweight protocol that uses JSON for data exchange and is commonly used in RESTful services.

Answer

GraphQL is a protocol that requires strict XML schemas and is used for real-time event notifications.

Answer

Webhooks are a method for polling servers at regular intervals to check for updates.

Question 5

Match each switchport or STP feature to its most accurate purpose.

Accepted Answer

PortFast allows a port to skip listening/learning states.. PortFast allows an edge port to immediately transition to forwarding state, skipping listening and learning. BPDU Guard disables a port if a BPDU is received, enhancing security. Root Guard prevents a port from becoming the root port by error-disabling it upon receiving superior BPDUs. Port Security limits MAC addresses allowed on a switch port.

Answer

UplinkFast provides fast failover for directly connected failures.

Answer

BackboneFast reduces convergence time for indirect failures.

Answer

BPDU Guard disables a port if BPDU is received.

Question 6

Drag and drop the FHRP protocols on the left to their key characteristics on the right.

Accepted Answer

VRRP. HSRP and GLBP are Cisco proprietary; VRRP is open standard. GLBP uniquely supports load balancing. IRDP is not a true FHRP. Virtual IP and preemption are common characteristics.

Answer

HSRP

Answer

GLBP

Answer

IRDP

Question 7

Drag and drop the route types on the left to the correct administrative distance and use case descriptions on the right.

Accepted Answer

Connected routes: AD 0, directly connected networks. Floating static routes do not have a fixed administrative distance; they are manually configured with an AD higher than the primary dynamic routing protocol's AD (e.g., higher than OSPF's 110 or EIGRP's 90) to serve as backup. Using AD 5 would make the route preferred over most dynamic protocols, defeating its backup purpose. The other pairings are correct: static and connected routes have AD 0/1, OSPF has AD 110, and a default route is a static route with AD 1 for unknown destinations.

Answer

Static routes: AD 1, manually configured by an administrator

Answer

EIGRP internal routes: AD 90, used for routing within the same autonomous system

Answer

OSPF routes: AD 110, used for routing within the same autonomous system

Question 8

Match each API security or access term to its most accurate description.

Accepted Answer

API key: A unique identifier used to authenticate a client making API requests, often passed in the request header.. These terms are common in API security and access control. Each pairing matches the term with its standard definition in IT certification contexts.

Answer

OAuth: A protocol that allows a user to grant limited access to their resources on one site to another site, without sharing credentials.

Answer

JWT: A compact, URL-safe token that contains claims and is digitally signed, used for securely transmitting information between parties.

Answer

Basic authentication: A method where the client sends a username and password encoded in Base64 in the HTTP header.

Question 9

Drag and drop the following steps into the correct order to configure an IPv4 address on a Cisco IOS-XE router interface, then verify the configuration with a ping to a host that uses an IPv6 EUI-64 address.

Accepted Answer

Enter global configuration mode, enter interface configuration mode, assign IPv4 address, exit to enable mode, ping IPv6 host. The correct sequence is to first enter global configuration mode, then interface configuration mode, assign the IPv4 address, exit completely to enable mode, and finally ping the IPv6 host. Option B is incorrect because you cannot enter interface configuration mode before global configuration mode; you must be in global config first. Option C is incorrect because you cannot assign an IPv4 address in global configuration mode; that command must be issued in interface configuration mode. Option D is incorrect because you cannot execute the ping command from interface configuration mode; you must exit to enable mode first.

Question 10

Drag and drop the following steps into the correct order to isolate CRC errors, duplex mismatches, and flapping on a Cisco IOS-XE interface.

Accepted Answer

Enter configuration mode, enable debugs, monitor logs, analyze data, apply fixes and verify.. First enter configuration mode, then enable debugs to capture errors, monitor logs, analyze the data, and finally apply fixes and verify.

Answer

Enable debugs, enter configuration mode, monitor logs, analyze data, apply fixes and verify.

Answer

Monitor logs, enter configuration mode, enable debugs, analyze data, apply fixes and verify.

Answer

Enter configuration mode, monitor logs, enable debugs, analyze data, apply fixes and verify.

Question 11

Match each REST-style method to the most common intent.

Accepted Answer

GET - Retrieve a resource. RESTful methods map to CRUD operations: GET retrieves, POST creates, PUT replaces, PATCH partially updates, DELETE removes, and OPTIONS returns allowed methods.

Answer

GET - Create a new resource

Answer

POST - Retrieve a resource

Answer

PUT - Partially update a resource

Question 12

Drag and drop the protocol/model on the left to the correct description on the right.

Accepted Answer

YANG: Data modeling language used to define configuration and state data structures. YANG is a data modeling language used to define configuration and state data. NETCONF is an XML-based protocol over SSH that supports transactional configuration management. RESTCONF is a RESTful API over HTTPS that uses standard HTTP methods like GET, PUT, POST, DELETE. NETCONF <edit-config> is an operation that modifies configuration with options like merge, replace, create, delete. RESTCONF PATCH is an HTTP method used for partial updates to a resource.

Question 13

Match each WLAN term to its correct description.

Accepted Answer

WLAN. SSID is the service set identifier, the human-readable name that identifies a wireless network. WPA3 is the latest Wi-Fi security standard providing stronger encryption and authentication. CAPWAP is the Control and Provisioning of Wireless Access Points protocol, used for communication between lightweight APs and wireless LAN controllers. Roaming is the process of a wireless client moving between different access points or coverage areas while maintaining its network session.

Answer

Mobility Group

Answer

Roaming

Answer

Fast Roaming

Question 14

Drag and drop the syslog severity levels and NTP concepts on the left to their correct descriptions on the right.

Accepted Answer

Syslog severity level 0 (Emergency) – System is unusable; NTP Stratum 0 – Reference clock (e.g., atomic clock). Syslog severity levels range from 0 (Emergency) to 7 (Debug), with 0 being the most critical. NTP stratum indicates clock accuracy: stratum 0 is the reference clock, stratum 1 is directly connected to a reference, and so on up to stratum 15, which is the maximum usable synchronized stratum. Stratum 16 means the device is unsynchronized. The ntp server command configures a device as a client, and show ntp status displays synchronization state and current stratum.

Answer

Syslog severity level 0 (Emergency) – System is unusable; NTP Stratum 0 – Client that synchronizes to a Stratum 1 server

Answer

Syslog severity level 7 (Debug) – System is unusable; NTP Stratum 0 – Reference clock (e.g., atomic clock)

Answer

Syslog severity level 7 (Debug) – System is unusable; NTP Stratum 0 – Client that synchronizes to a Stratum 1 server

Question 15

Match each common infrastructure service to its most accurate role.

Accepted Answer

DNS - Resolves domain names to IP addresses. DNS resolves hostnames to IP addresses (hostname resolution). DHCP automatically assigns IP configurations to devices (automatic IP configuration). NTP synchronizes clocks across network devices (clock synchronization). Syslog collects and centralizes logs from network devices for monitoring and troubleshooting (centralized event and log reporting). A common mistake is confusing Syslog with SNMP: Syslog sends log messages, while SNMP is used for polling and traps for device management.

Answer

DNS - Assigns IP addresses to devices dynamically

Answer

DNS - Synchronizes clocks across network devices

Answer

DNS - Provides secure remote access to network devices

Question 16

Drag and drop the cable issue symptoms on the left to the correct descriptions on the right.

Accepted Answer

Crosstalk: Interference caused by electromagnetic coupling between adjacent cables.. Each interface counter describes a specific type of packet failure. CRC errors occur when the frame check sequence fails, pointing to physical issues like bad cabling or interference. Input errors is a broader counter that sums all receive-side anomalies, including CRC errors, runts, and giants. Output errors represents transmit-side failures, often from collisions, buffer overruns, or late collisions. Runts are frames shorter than the 64-byte minimum, commonly caused by collisions or defective hardware, while giants exceed the maximum frame size and usually indicate a duplex mismatch or faulty NIC. Understanding these categories helps pinpoint whether the problem is receive-side, transmit-side, or due to physical layer faults.

Answer

Attenuation: Loss of signal strength over the length of the cable.

Answer

Impedance mismatch: Reflection of signals due to inconsistent cable impedance.

Answer

Split pair: Incorrect wire pairing causing excessive crosstalk.

Question 17

Match each EtherChannel term or state to its most accurate meaning.

Accepted Answer

PAgP – Cisco proprietary protocol that negotiates the creation of an EtherChannel automatically.. LACP is a standards-based protocol (IEEE 802.3ad) that dynamically negotiates an EtherChannel bundle. In the port state output, 'P' (Port is in Active Port Mode) means the port is bundled into the channel. 'I' (Port is in Individual Mode) indicates the port is operating alone and not part of any bundle. 'SU' (Layer 2, In-Use) shown in the port-channel interface status confirms the logical bundle is Layer 2 and administratively up. These terms directly map to the given meanings.

Answer

LACP – Open standard protocol that dynamically creates an EtherChannel by exchanging frames.

Answer

On – Forces the interface to use EtherChannel without any negotiation protocol.

Answer

Active – LACP mode that initiates negotiation and responds to LACP packets.

Question 18

Match each data-structure term to its most accurate meaning.

Accepted Answer

Key: Field name. These pairs correctly match data-structure terms to their definitions. Array uses indices, hash table uses key-value mapping, stack is LIFO, queue is FIFO, linked list uses nodes with references, and tree is hierarchical.

Question 19

Match each REST API method to the action it most closely represents in a typical network automation workflow.

Accepted Answer

GET retrieves data, POST creates new resources, PUT updates/replaces, PATCH partially updates, DELETE removes, and OPTIONS queries available methods.. GET retrieves data, POST creates new resources, PUT updates/replaces, PATCH partially updates, DELETE removes, and OPTIONS queries available methods. These correspond to common network automation workflows.

Answer

GET retrieves data, POST creates new resources, PUT partially updates, PATCH updates/replaces, DELETE removes, and OPTIONS queries available methods.

Answer

GET retrieves data, POST updates/replaces, PUT creates new resources, PATCH partially updates, DELETE removes, and OPTIONS queries available methods.

Answer

GET retrieves data, POST creates new resources, PUT partially updates, PATCH updates/replaces, DELETE removes, and OPTIONS queries available methods.

Question 20

Match each term to the question it most directly answers.

Accepted Answer

Default gateway. Authentication verifies a user's identity, answering 'Who are you?'. Authorization defines what an authenticated user is permitted to do, answering 'What are you allowed to do?'. Accounting records the actions and resources used during a session, answering 'What happened during the session?'. Availability ensures that services and data are accessible when required, answering 'Can the service or data be used when needed?'.

Answer

MAC address

Answer

ARP

Answer

Subnet mask