CCNA Matching — 60 Questions

Question 1

Match each REST-style method to the most common intent.

Accepted Answer

GET - Retrieve a resource. RESTful methods map to CRUD operations: GET retrieves, POST creates, PUT replaces, PATCH partially updates, DELETE removes, and OPTIONS returns allowed methods.

Answer

GET - Create a new resource

Answer

POST - Retrieve a resource

Answer

PUT - Partially update a resource

Question 2

Match each network service to its primary function.

Accepted Answer

DNS: Translates domain names to IP addresses. Each network service has a distinct primary function: DNS translates names to IPs, DHCP automates IP assignment, NTP synchronizes time, SNMP manages devices, FTP transfers files, and HTTP serves web content.

Answer

DNS: Assigns IP addresses dynamically to devices on a network

Answer

DNS: Synchronizes time across network devices

Answer

DNS: Manages and monitors network devices

Question 3

Match each HTTP method to its common REST API action.

Accepted Answer

GET - Retrieve data. GET retrieves data; POST creates; PUT replaces; PATCH partially updates; DELETE removes; OPTIONS queries available methods.

Answer

GET - Create data

Answer

POST - Retrieve data

Answer

PUT - Partially update data

Question 4

Match each switching feature to its most accurate purpose.

Accepted Answer

STP prevents loops, VTP manages VLANs, EtherChannel aggregates links, Port Security restricts MAC addresses, DTP negotiates trunks, and Rapid PVST+ provides fast per-VLAN convergence.. Which accurately pairs each switching feature with its purpose: Spanning Tree Protocol (STP) prevents loops in a switched network by blocking redundant paths; VLAN Trunking Protocol (VTP) manages the addition, deletion, and renaming of VLANs across the network; EtherChannel aggregates multiple physical links into a single logical link for increased bandwidth and redundancy; Port Security limits the number of MAC addresses allowed on a switch port to prevent unauthorized access; Dynamic Trunking Protocol (DTP) automatically negotiates trunking between switches; and Rapid PVST+ provides fast convergence for each VLAN using multiple spanning tree instances. The other options contain incorrect pairings, such as mixing up STP with VLAN management or EtherChannel with loop prevention.

Answer

STP manages VLANs, VTP prevents loops, EtherChannel restricts MAC addresses, Port Security aggregates links, DTP provides fast per-VLAN convergence, and Rapid PVST+ negotiates trunks.

Answer

STP aggregates links, VTP prevents loops, EtherChannel manages VLANs, Port Security negotiates trunks, DTP restricts MAC addresses, and Rapid PVST+ provides fast per-VLAN convergence.

Answer

STP provides fast per-VLAN convergence, VTP aggregates links, EtherChannel prevents loops, Port Security manages VLANs, DTP restricts MAC addresses, and Rapid PVST+ negotiates trunks.

Question 5

Drag and drop the syslog severity levels on the left to their corresponding names and meanings on the right.

Accepted Answer

Level 0 – Emergency: System is unusable. All four options correctly match syslog severity levels 0-3 with their descriptions. Levels 0 (Emergency), 1 (Alert), 2 (Critical), and 3 (Error) are the highest severity levels.

Question 6

Drag and drop the items on the left to match the descriptions on the right.

Accepted Answer

Access port: Carries traffic for a single VLAN, configured with switchport mode access.. Access ports carry traffic for a single VLAN and are configured with switchport mode access. Voice VLANs are added to an access port with switchport voice vlan to separate voice and data traffic. Trunk ports carry multiple VLANs and are set with switchport mode trunk; allowed VLANs can be restricted with switchport trunk allowed vlan.

Answer

Voice VLAN: Added to a trunk port to prioritize voice traffic.

Answer

Allowed VLANs: Configured with switchport access vlan to restrict VLANs on a trunk.

Question 7

Drag and drop the route types on the left to the correct administrative distance and use case descriptions on the right.

Accepted Answer

Connected routes: AD 0, directly connected networks. All the given pairings are correct. Connected routes use AD 0 because they are directly connected. Static routes use AD 1 as they are manually configured. EIGRP internal routes have AD 90, and OSPF routes have AD 110; both are IGPs used for routing within the same autonomous system.

Question 8

Drag and drop the protocols/technologies on the left to the descriptions on the right.

Accepted Answer

SSH: Provides secure remote access to network devices using encryption, typically on TCP port 22.. SSH (Secure Shell) provides encrypted remote access to network devices, typically using TCP port 22. It is the secure alternative to Telnet. Telnet (port 23) is unencrypted and insecure. HTTP (port 80) is used for web traffic, not remote access. FTP (port 21) is for file transfers and is not designed for remote shell access. Therefore, only SSH matches the description of secure remote access.

Answer

Telnet: Provides secure remote access to network devices using encryption, typically on TCP port 23.

Answer

HTTP: Provides secure remote access to network devices using encryption, typically on TCP port 80.

Answer

FTP: Provides secure remote access to network devices using encryption, typically on TCP port 21.

Question 9

Drag and drop the items on the left to match the descriptions on the right.

Accepted Answer

switchport mode trunk: Configures a trunk port. VLANs segment a switch into multiple broadcast domains. 802.1Q trunking encapsulates frames with a VLAN tag, while the native VLAN carries untagged traffic. 'switchport mode trunk' configures a trunk port, 'show vlan brief' lists VLAN assignments, and inter-VLAN routing enables communication between VLANs typically using a router or Layer 3 switch.

Answer

VLAN: Encapsulates frames with a VLAN tag

Answer

802.1Q trunking: Carries untagged traffic on a trunk

Answer

Native VLAN: Segments a switch into multiple broadcast domains

Question 10

Drag and drop the protocol/model on the left to the correct description on the right.

Accepted Answer

YANG: Data modeling language used to define configuration and state data structures. YANG is a data modeling language used to define configuration and state data. NETCONF is an XML-based protocol over SSH that supports transactional configuration management. RESTCONF is a RESTful API over HTTPS that uses standard HTTP methods like GET, PUT, POST, DELETE. NETCONF <edit-config> is an operation that modifies configuration with options like merge, replace, create, delete. RESTCONF PATCH is an HTTP method used for partial updates to a resource.

Question 11

Match each REST API method to the action it most closely represents in a typical network automation workflow.

Accepted Answer

GET retrieves data, POST creates new resources, PUT updates/replaces, PATCH partially updates, DELETE removes, and OPTIONS queries available methods.. GET retrieves data, POST creates new resources, PUT updates/replaces, PATCH partially updates, DELETE removes, and OPTIONS queries available methods. These correspond to common network automation workflows.

Answer

GET retrieves data, POST creates new resources, PUT partially updates, PATCH updates/replaces, DELETE removes, and OPTIONS queries available methods.

Answer

GET retrieves data, POST updates/replaces, PUT creates new resources, PATCH partially updates, DELETE removes, and OPTIONS queries available methods.

Answer

GET retrieves data, POST creates new resources, PUT partially updates, PATCH updates/replaces, DELETE removes, and OPTIONS queries available methods.

Question 12

Match each networking concept to its most accurate role.

Accepted Answer

Unicast: one-to-one communication. Unicast communication involves one-to-one transmission between a single sender and a single receiver. Broadcast is one-to-all communication, where a packet is sent to every device on the local subnet. Multicast is one-to-many communication, where a single sender transmits to a specific group of interested receivers. Anycast is one-to-one-of-many, where a packet is delivered to the nearest node among a group of potential receivers, typically used for services like DNS. The other options are incorrectly defined: Broadcast is not one-to-closest (that is anycast), Multicast is not one-to-all (that is broadcast), and Anycast is not one-to-group (that is multicast). Therefore, only option A is correctly matched.

Answer

Broadcast: one-to-closest communication

Answer

Multicast: one-to-all communication

Answer

Anycast: one-to-group communication

Question 13

Match each operations or assurance technology to its most accurate purpose.

Accepted Answer

NetFlow - Flow analysis; SNMP - Device management; Syslog - Logging; IP SLA - Performance measurement; SPAN - Local traffic mirroring; RSPAN - Remote traffic mirroring. Each technology serves a specific assurance purpose: Syslog provides centralized event and message reporting, SNMP enables monitoring and management information exchange, NetFlow offers visibility into traffic flows and conversations, and NTP ensures clock synchronization for consistent timing across network devices.

Answer

NetFlow - Device management; SNMP - Flow analysis; Syslog - Performance measurement; IP SLA - Logging; SPAN - Remote traffic mirroring; RSPAN - Local traffic mirroring

Answer

NetFlow - Logging; SNMP - Performance measurement; Syslog - Flow analysis; IP SLA - Device management; SPAN - Remote traffic mirroring; RSPAN - Local traffic mirroring

Answer

NetFlow - Performance measurement; SNMP - Logging; Syslog - Device management; IP SLA - Flow analysis; SPAN - Local traffic mirroring; RSPAN - Remote traffic mirroring

Question 14

Match each REST-style method to the action it most commonly represents.

Accepted Answer

GET - Retrieve, POST - Create, PUT - Replace, PATCH - Partial Modify, DELETE - Remove, HEAD - Headers only. REST methods are standardized: GET retrieves, POST creates, PUT replaces, PATCH partially modifies, DELETE removes, and HEAD retrieves only headers.

Answer

GET - Retrieve, POST - Update, PUT - Create, PATCH - Delete, DELETE - Replace, HEAD - Headers only

Answer

GET - Retrieve, POST - Create, PUT - Update, PATCH - Replace, DELETE - Remove, HEAD - Headers only

Answer

GET - Retrieve, POST - Create, PUT - Replace, PATCH - Update, DELETE - Remove, HEAD - Headers only

Question 15

Drag each automation or API concept from the left to its corresponding description on the right. Not all descriptions are used.

Concepts:
- Northbound API
- Southbound API
- JSON
- HTTPS

Accepted Answer

Application-facing interface to the controller. Northbound API: the application-facing interface of an SDN controller, allowing apps to request services. Southbound API: the interface that enables the controller to configure managed devices, such as OpenFlow. JSON: a structured data format using key/value pairs and arrays, lightweight and machine‑friendly. HTTPS: secure, encrypted transport for API communications, protecting data in transit. Distractors: 'Human-readable serialization format' describes YAML, not JSON or APIs. 'Protocol for network device configuration' might refer to NETCONF or CLI, not HTTPS or the APIs listed.

Question 16

Match each access-control term to its most accurate meaning.

Accepted Answer

Authentication: The process of verifying the identity of a user or device.. AAA is a framework for controlling access. Authentication verifies identity, authorization grants permissions, and accounting logs activities. Identification is the initial claim, and auditing is the review of logs.

Answer

Authorization: The process of verifying the identity of a user or device.

Answer

Accounting: The process of granting or denying access to network resources.

Answer

Identification: The process of logging and monitoring user activities.

Question 17

Match each common automation term to its most accurate meaning.

Accepted Answer

Infrastructure as Code: Managing infrastructure through machine-readable definition files. Infrastructure as Code (IaC) refers to managing and provisioning infrastructure through machine-readable definition files, enabling automation and version control. Idempotence means that performing the same operation multiple times results in the same state, ensuring consistency. The declarative model allows the user to define the desired end state, and the system automatically determines how to achieve it. In contrast, the imperative model requires the user to specify step-by-step instructions to reach the desired state. These four terms are fundamental to understanding network automation approaches.

Question 18

Match each automation-related term to the description that best fits it.

Accepted Answer

Idempotent: An operation that can be applied multiple times without changing the result beyond the initial application.. The question requires matching automation-related terms to their correct descriptions. Idempotent means that an operation can be applied multiple times without changing the result after the first application. Declarative is a style where the user defines the desired state and the system determines the steps to achieve it. Imperative is a style where explicit step-by-step instructions are given. Orchestration refers to the automated coordination of multiple systems or services to complete a workflow. Each description aligns precisely with these concepts.

Question 19

Match each Layer 2 protection feature to its most accurate purpose.

Accepted Answer

Storm Control: Limits excessive broadcast, multicast, or unicast traffic to prevent network storms.. Storm Control limits excessive traffic. Port Security limits MAC addresses. DHCP Snooping blocks unauthorized DHCP servers. DAI validates ARP packets. IP Source Guard filters IP traffic based on DHCP snooping. 802.1X authenticates devices before granting access.

Answer

Storm Control: Authenticates devices before granting network access.

Answer

Storm Control: Validates ARP packets to prevent ARP spoofing attacks.

Answer

Storm Control: Filters IP traffic based on DHCP snooping bindings.

Question 20

Match each IPv6 concept to its most accurate description.

Accepted Answer

IPv6 address: 128-bit identifier for network interfaces. These pairings accurately define key IPv6 concepts.