CCNA Drag & Drop — 60 Questions

Question 1

Drag and drop the following steps into the correct order to configure HSRP on an interface and verify the active/standby election process, including failover and verification.

Accepted Answer

Enter interface configuration mode, set HSRP version, configure virtual IP, set priority (if needed), enable preempt, then verify with 'show standby'.. The correct order for HSRP configuration is step A: first enter interface configuration mode, set HSRP version, configure the virtual IP, optionally set priority to influence active router selection, enable preempt to allow the higher-priority router to reclaim active role, and verify with 'show standby' to see real-time roles and states. Step B is incorrect because HSRP is configured per interface, not via global configuration and VLAN creation; the virtual IP is set on the interface, not on a VLAN. Step C is wrong because priority should be set after entering interface configuration mode, not before, and verification should use 'show standby' not 'show running-config'. Step D is invalid because there is no global 'router hsrp' command; HSRP configuration is done directly on the interface, and 'debug standby' is not a reliable verification command. 'show standby' is the standard command to verify active/standby status.

Question 2

Drag and drop the following steps into the correct order to configure an SSID on a WLC and complete a WPA3-Personal client association with DHCP address assignment.

Accepted Answer

Configure DHCP scope, create an SSID profile, enable the SSID, configure WPA3-Personal security, client associates and obtains IP address.. The correct sequence is to first create the SSID profile, then configure WPA3-Personal security to ensure the WLAN is protected before it becomes active, then enable the SSID, set up the DHCP scope for address assignment, and finally allow the client to associate and obtain an IP address. Option A enables the SSID before setting security, exposing the network to unauthorized access during that window. Option B incorrectly starts with DHCP configuration before the SSID even exists. Option D also enables the SSID before security, leading to the same vulnerability as option A. Only option C follows the secure configuration order recommended by Cisco.

Answer

Create an SSID profile, enable the SSID, configure WPA3-Personal security, configure DHCP scope, client associates and obtains IP address.

Question 3

Drag and drop the following steps into the correct order to configure a Cisco IOS-XE router as a DHCP server for a client VLAN and then enable a DHCP relay agent on a different interface to forward client requests to a remote server.

Accepted Answer

Enter global configuration mode, enable DHCP relay on the required interface, create the DHCP pool, configure the network and default gateway, exclude addresses, and verify.. The correct order is to first exclude addresses to prevent the DHCP server from leasing reserved or gateway IPs, then create and configure the DHCP pool (network, default gateway), next enable DHCP relay on the required interface, and finally verify. Option D follows this Cisco best practice. Option A risks assigning excluded addresses because the pool is created before exclusions. Options B and C place relay setup before the pool is fully configured, which is incorrect.

Answer

Enter global configuration mode, create the DHCP pool, configure the network and default gateway, exclude addresses, enable DHCP relay on the required interface, and verify.

Question 4

Drag and drop the following troubleshooting steps into the correct order to diagnose a client connectivity issue using the OSI bottom-up method. The client cannot access a web server by its FQDN.

Accepted Answer

Check physical connectivity (cables, link lights, interface status).. The bottom-up OSI approach starts with Layer 1 (physical) – step A; then Layer 2 (data link) – step D; then Layer 3 (network) – step C; and finally Layer 7 (application) – step B. This methodical progression isolates the issue layer by layer, ensuring all dependencies are checked systematically.

Question 5

Drag and drop the following steps into the correct order to capture and analyze traffic on IOS-XE using the embedded packet capture feature, then export the capture for analysis in Wireshark to isolate a Layer 2 or Layer 3 fault.

Accepted Answer

Define the capture point specifying the interface and direction (monitor capture point command). Embedded Packet Capture (EPC) on IOS-XE uses exec-mode monitor capture commands without needing global configuration mode. First, define the capture point specifying the interface and direction. Then start the capture to collect packets. Stop the capture after gathering sufficient data, and finally export the file to a TFTP server for analysis in Wireshark.

Question 6

Drag and drop the following steps into the correct order to configure OSPFv3 for IPv6 on a Cisco IOS-XE router.

Accepted Answer

Enable IPv6 routing globally with 'ipv6 unicast-routing'. To configure OSPFv3 for IPv6, first enable IPv6 routing globally with 'ipv6 unicast-routing'. Next, enter OSPFv3 configuration mode using 'router ospfv3 1' to set process parameters. Then, apply OSPFv3 on each interface with 'ipv6 ospf area '. Finally, verify adjacencies with 'show ipv6 ospf neighbor'.

Question 7

Drag and drop the steps into the recommended configuration order for setting up VLANs, assigning access ports, configuring 802.1Q trunking with a non-default native VLAN, and verifying the setup on a Cisco IOS-XE switch.

Accepted Answer

1. Create VLANs, 2. Configure trunking with non-default native VLAN, 3. Assign access ports to VLANs, 4. Verify configuration. After creating VLANs, the recommended order is to configure trunking with a non-default native VLAN before assigning access ports. This ensures the trunk is ready with the correct native VLAN, preventing mismatches and allowing the switch to carry traffic for the new VLANs. Options B and D fail because VLANs must exist first. Option A places trunking last, which is not the best practice.

Answer

1. Create VLANs, 2. Assign access ports to VLANs, 3. Configure trunking with non-default native VLAN, 4. Verify configuration

Answer

1. Assign access ports to VLANs, 2. Create VLANs, 3. Configure trunking with non-default native VLAN, 4. Verify configuration

Answer

1. Configure trunking with non-default native VLAN, 2. Create VLANs, 3. Assign access ports to VLANs, 4. Verify configuration

Question 8

Drag and drop the following troubleshooting steps into the correct order to isolate CRC errors, duplex mismatches, and flapping on a Cisco IOS-XE interface.

Accepted Answer

Use show commands to gather interface statistics and identify errors.. First, gather data with show commands to identify the errors (CRC, duplex, flapping). Then apply configuration changes to resolve the issue. Next, clear interface counters to reset statistics and create a clean baseline. Finally, monitor interface statistics to verify that the errors are no longer occurring.

Question 9

Drag and drop the following steps into the correct order to configure a Cisco IOS-XE router as a DHCP relay agent and verify the DHCP DORA process for a client on a different subnet.

Accepted Answer

Configure the 'ip helper-address' command on the interface facing the client subnet.. First configure the ip helper-address on the client-facing interface (A). Then enable 'debug ip dhcp relay' (D) so forwarded packets are captured. Next trigger the DORA process by releasing/renewing the client IP address (C). Finally verify with passive show commands (B). Debug must be active before the DORA exchange; enabling it afterward misses the output.

Question 10

Drag and drop the following steps into the correct order to configure PAT (overload) on a Cisco router using a single public IP address on the outside interface.

Accepted Answer

Enter global configuration mode. The correct sequence is: first enter global configuration mode, then define the access list that matches inside traffic. Next, mark the inside and outside interfaces with `ip nat inside` and `ip nat outside` respectively. Finally, enable PAT with overload using `ip nat inside source list interface overload`. This order ensures the router knows which interfaces are internal and external, which traffic to translate, and how to perform the translation.

Question 11

Drag and drop the following steps into the correct order to explicitly configure OSPFv3 for IPv6 on a Cisco IOS-XE router, assuming no OSPFv3 routing process exists beforehand.

Accepted Answer

Enable IPv6 unicast routing globally. To configure OSPFv3, first globally enable IPv6 unicast routing (A). Next, create the OSPFv3 routing process (C) so that it is defined before interfaces try to use it. Then, configure OSPFv3 on the relevant interfaces (B) to activate routing. Finally, verify the OSPFv3 adjacency (D) to confirm neighbors are formed. This sequence avoids automatic process creation and ensures all steps are explicitly controlled.

Question 12

A network troubleshooter is using Cisco IOS-XE's embedded packet capture feature to capture traffic on an interface and then analyze it in Wireshark to isolate a Layer 2 or Layer 3 fault. Which of the following sequences represents the correct order of steps?

Accepted Answer

Define the capture point with interface and optional filter, start the capture, stop the capture, export the capture file, then analyze in Wireshark.. The correct workflow is to first define the capture point (interface and any filters), then start the capture, stop it when sufficient data is collected, export the captured packets to a file, and finally open that file in Wireshark for analysis. Starting the capture before defining the point, exporting before stopping, or defining the point after stopping all result in an invalid or incomplete capture process.

Answer

Start the capture, define the capture point with interface and filter, stop the capture, export the capture file, then analyze in Wireshark.

Answer

Define the capture point, start the capture, export the capture file, stop the capture, then analyze in Wireshark.

Answer

Start the capture, stop the capture, define the capture point, export the capture file, then analyze in Wireshark.

Question 13

Drag and drop the following steps into the correct order to configure HSRP on a router and verify the active/standby election process.

Accepted Answer

1. Enter interface configuration mode on the desired interface. 2. Configure the HSRP group number and virtual IP address using the 'standby group-number ip virtual-ip' command. 3. Set the HSRP priority using the 'standby group-number priority priority-value' command. 4. Enable preemption using the 'standby group-number preempt' command. 5. Verify the HSRP state using 'show standby' or 'show standby brief'. 6. Test failover by shutting down the active router's interface and observing the state change.. The order begins with interface and HSRP group configuration, then priority and preempt. Verification shows the current state, and failover testing validates the election process works correctly.

Question 14

Drag and drop the following steps into the correct order to configure an LACP EtherChannel on two Cisco switches using active mode.

Accepted Answer

Enter interface configuration mode for the physical ports (interface range gigabitethernet 0/1-2).. To configure an LACP EtherChannel in active mode, you must first enter interface configuration mode on the physical interfaces (e.g., using interface range). Next, assign those interfaces to a channel group using the channel-group command with the mode active keyword; this enables LACP negotiation and ensures the switch actively attempts to form a bundle. After the member ports are configured, you can optionally set parameters on the Port-Channel interface (such as switchport mode trunk). Finally, verify the EtherChannel is operational with show etherchannel summary. Using mode passive, on, or desirable would not enable LACP active negotiation or would use a different protocol (PAgP), which does not meet the requirement.

Question 15

Drag and drop the following steps into the correct order to configure PAT (Port Address Translation) on a Cisco IOS-XE router and describe the translation process for an outbound packet.

Accepted Answer

Enter global configuration mode, mark inside and outside interfaces, create a pool of global addresses, then enable PAT with overload.. First, enter config mode. Then mark the inside and outside interfaces. Create a pool of global addresses. Finally, enable PAT with overload to allow multiple inside hosts to share the pool addresses.

Answer

Enter global configuration mode, enable PAT with overload, create a pool of global addresses, then mark inside and outside interfaces.

Question 16

Drag and drop the following steps into the correct order to implement a basic network monitoring workflow using telemetry and streaming analytics on Cisco IOS-XE.

Accepted Answer

Collect data via telemetry from network devices. The workflow begins with collecting telemetry data from devices, then streams it to an analytics platform for processing. The data is visualized on dashboards for monitoring, and finally alerts are generated when predefined thresholds are exceeded to enable a response.

Question 17

Drag and drop the following steps into the correct order to set up gRPC streaming telemetry subscription on a Cisco IOS-XE device.

Accepted Answer

Enter global configuration mode, create a telemetry subscription, configure the receiver, define the sensor path, associate the sensor group with the subscription.. The correct sequence starts by entering global configuration mode. Next, create a telemetry subscription because the subscription provides the sub-mode where the remaining elements are configured. Within the subscription, configure the receiver to specify the destination, protocol, and encoding. Then, define the sensor path to select the YANG data nodes to be streamed. Finally, associate the sensor group to bind the sensor path to the subscription. While the order of configuring the receiver and defining the sensor path is flexible inside the subscription—neither depends on the other—the subscription itself must exist before any subcomponent.

Question 18

Drag and drop the following steps into the correct order to configure an IPv4 static address on a Windows host, generate an IPv6 EUI-64 address on a Cisco router, verify the router's IPv6 EUI-64 address, and confirm connectivity from the Windows host.

Accepted Answer

Set static IPv4 address on Windows host. The correct order is: first configure the router's IPv6 EUI-64 address to set up the network infrastructure, then assign the Windows host a static IPv4 address. Next, verify the router's IPv6 EUI-64 address to confirm proper generation. Finally, perform a connectivity test from the Windows host to validate end-to-end communication. This sequence ensures that configuration is completed before verification and that the final step confirms both configurations are operational.

Question 19

Drag and drop the following steps into the correct order to configure and recover from a BPDU guard violation on a PortFast-enabled access port in RSTP.

Accepted Answer

Configure PortFast and BPDU guard on the interface.. Configure PortFast and BPDU guard on the access port. Then trigger a violation by connecting an unauthorized switch, which causes the port to error-disable. Diagnose by checking the error-disabled status. To recover, first remove the offending device, then cycle the port with shutdown and no shutdown; otherwise the port will immediately go error-disabled again.

Question 20

Drag and drop the following troubleshooting steps into the correct order to diagnose a client connectivity issue using the OSI bottom-up method.

Accepted Answer

Check the physical cable connections and link lights. The OSI bottom-up troubleshooting method starts at Layer 1: first check physical cable connections and link lights (A). Next, at Layer 2, verify the switch's MAC address table (D) to ensure local segment communication is intact. Moving to Layer 3, confirm the IP address configuration and subnet mask (B) are correct. Finally, ping the default gateway (C) to validate end-to-end Layer 3 connectivity. The correct sequence is A → D → B → C, because each lower layer must function before higher-layer tests can succeed.