CCNA Network Services and Security Practice Test 3 — 15 Questions

Question 1

Which statement best describes why SSH is safer than Telnet for remote administration?

Accepted Answer

SSH encrypts the management session, while Telnet does not.. SSH is safer because it encrypts the remote administrative session. In plain language, credentials and command traffic are protected while crossing the network, whereas Telnet sends that information in clear text. That makes SSH the preferred option for secure device management.

This is one of the most foundational security comparisons in network administration. The correct answer is the one focused on encryption in transit.

Answer

Telnet is safer because it is simpler.

Answer

SSH removes the need for usernames and passwords.

Answer

Telnet is the required protocol for VLAN trunks.

Question 2

What is the primary function of DHCP on a normal client network?

Accepted Answer

To provide IP configuration information to hosts automatically. DHCP automatically provides hosts with IP configuration information. In practical terms, that usually includes an IP address, subnet mask, default gateway, and often DNS server information. This makes endpoint onboarding faster, reduces manual configuration effort, and lowers the chance of typing mistakes.

This is one of the most widely used infrastructure services in enterprise and home networks alike. The correct answer is the one focused on automatic host configuration rather than name resolution or logging.

Answer

To resolve hostnames into IP addresses

Answer

To collect event logs from switches and routers

Answer

To encrypt remote management traffic

Question 3

Which statement best describes the security value of least privilege?

Accepted Answer

It reduces unnecessary exposure by limiting access to only what is needed.. Least privilege limits accounts to the permissions they actually need. In practical terms, that reduces the damage that can happen if a user makes a mistake, misuses access, or has an account compromised. The key idea is not distrust for its own sake. It is reducing unnecessary exposure.

This principle matters because broad permissions create larger blast radius when something goes wrong. The correct answer is the one focused on minimizing impact by avoiding excess access.

Answer

It guarantees that trusted users will never make mistakes.

Answer

It removes the need for logging and auditing.

Answer

It requires every user to have full administrative rights temporarily.

Question 4

Which statement best describes the main operational difference between DNS and DHCP?

Accepted Answer

DNS resolves names, while DHCP provides automatic IP configuration.. DNS resolves names into IP-related information, while DHCP automatically provides IP configuration to clients. In practical terms, DNS helps users and applications find systems by name, and DHCP helps devices join the network with addresses, masks, gateways, and often DNS settings. They are both infrastructure services, but they solve different problems.

This distinction is important because troubleshooting often depends on recognizing whether the issue is address assignment or name resolution.

Answer

DNS provides subnet masks, while DHCP resolves hostnames.

Answer

Both are routing protocols used only by routers.

Answer

Neither service is useful on end-user networks.

Question 5

What is the primary reason NTP is valuable in a network operations environment?

Accepted Answer

It synchronizes device clocks, making logs and event timelines more trustworthy.. NTP is valuable because it keeps device clocks aligned. In practical terms, synchronized time makes logs, alerts, and investigations much easier to understand because administrators can trust the sequence of events. Without that alignment, event timelines become confusing and correlation becomes much harder.

This is why NTP is often paired conceptually with Syslog and monitoring. One provides the messages, and the other makes their timing reliable.

Answer

It assigns IP addresses to clients.

Answer

It resolves hostnames into IP addresses.

Answer

It replaces the need for centralized logging.

Question 6

What is the main operational benefit of DNS for users and applications?

Accepted Answer

It lets users and applications work with names instead of memorizing IP addresses.. The main benefit is that DNS allows users and applications to use names instead of memorizing raw IP addresses. In practical terms, people find names much easier to remember and work with. DNS creates that name-to-address translation layer while the network still uses IP addresses underneath.

This is one of the most important usability benefits in everyday networking. The correct answer is the one centered on name resolution and human-friendly access.

Answer

It automatically assigns default gateways.

Answer

It elects the OSPF designated router.

Answer

It removes the need for subnet masks.

Question 7

Which statement best describes availability in the CIA triad?

Accepted Answer

Ensuring systems and data can be accessed when needed.. Availability is about ensuring that systems, services, or data are accessible when they are needed. In practical terms, it focuses on uptime and usability rather than secrecy or tamper protection. If confidentiality is about who can see data and integrity is about whether the data was changed improperly, availability is about whether the system can still be used.

This matters because many security questions place the CIA terms side by side. You have to separate them cleanly to choose the right answer.

Answer

Preventing unauthorized disclosure of data.

Answer

Preventing unauthorized modification of data.

Answer

Recording user commands for review.

Question 8

Which statement best explains why SSH is safer than Telnet for remote management?

Accepted Answer

SSH encrypts the remote management session, while Telnet does not.. SSH is safer because it encrypts the management session. In practical terms, usernames, passwords, and command traffic are protected while crossing the network. Telnet sends the same information in clear text, which makes it much weaker in production environments.

This is one of the most fundamental management-security comparisons in networking. The correct answer is the one focused on session encryption.

Answer

SSH removes the need for authentication.

Answer

Telnet is safer because it is simpler to troubleshoot.

Answer

SSH is required for VLAN trunking.

Question 9

Which statement best describes the general goal of QoS in a converged network?

Accepted Answer

To influence how traffic is treated so important applications are handled appropriately under load.. The general goal of QoS is to help the network treat important traffic appropriately when resources are limited. In practical terms, voice, video, and critical business applications may need more careful handling than bulk background transfers. QoS does not create bandwidth out of nowhere, but it helps manage delay, loss, and priority under contention.

At the CCNA level, the key is understanding that QoS is about traffic-handling policy, not magic performance increases.

Answer

To encrypt all traffic before it crosses the network.

Answer

To eliminate the need for routing protocols.

Answer

To replace VLAN segmentation completely.

Question 10

Which statement best describes the purpose of SNMP in network operations?

Accepted Answer

It provides a framework for monitoring and management information exchange.. SNMP is used for monitoring and management information exchange between network devices and management systems. In practical terms, it gives monitoring platforms a standard way to read counters, interface status, device information, and sometimes receive alerts such as traps. It is part of network assurance and visibility, not basic packet forwarding.

This is a foundational operations concept. The common mistake is to confuse SNMP with logging, time sync, or routing.

Answer

It automatically assigns IP addresses to clients.

Answer

It replaces Syslog for event severity reporting entirely.

Answer

It is the default routing protocol on enterprise routers.

Question 11

Which statement best describes the difference between Syslog and SNMP traps?

Accepted Answer

Syslog focuses on centralized event messages, while SNMP traps are event notifications within the SNMP monitoring framework.. Both can provide operational visibility, but they are not the same. In practical terms, Syslog is centered on log and event messages with severity levels, while SNMP traps are event notifications sent as part of the SNMP monitoring framework. A network operations team might use both, but for different kinds of tooling and visibility workflows.

The important point at CCNA level is to recognize that both support assurance, but one is a logging model and the other is part of SNMP-based monitoring.

Answer

Syslog and SNMP traps are identical and fully interchangeable.

Answer

SNMP traps provide DHCP address assignment.

Answer

Syslog replaces the need for time synchronization.

Question 12

What is the main reason extended ACLs are often placed closer to the source of the traffic being filtered?

Accepted Answer

To stop unwanted traffic earlier and avoid carrying it farther through the network.. Extended ACLs are often placed close to the source so unwanted traffic is stopped earlier in the path. In practical terms, that conserves bandwidth and reduces unnecessary forwarding of traffic that will be denied anyway. Because extended ACLs can match more specific conditions such as source, destination, and protocol, they are especially useful early in the traffic path.

This is a standard ACL placement principle. The goal is not just security logic, but efficient use of the network as well.

Answer

Because extended ACLs can function only on source interfaces.

Answer

Because standard ACLs must always be placed near the destination instead.

Answer

Because ACL placement has no effect on network efficiency.

Question 13

Which statement best describes a Syslog severity level at a CCNA level?

Accepted Answer

It indicates the seriousness or urgency of a logged event message.. A Syslog severity level is a numeric indicator of how serious or urgent a logged event is. In practical terms, it helps operations teams distinguish between low-importance informational messages and more serious warning, error, or critical conditions. This makes filtering and response workflows more manageable.

At the CCNA level, the important point is understanding that severity expresses event seriousness, not traffic volume, route preference, or VLAN membership.

Answer

It identifies which VLAN generated the log.

Answer

It determines which route has the lowest administrative distance.

Answer

It is the port number used for DHCP relay.

Question 14

Which statement best explains why an ACL that lacks a needed permit statement can block legitimate traffic even if no explicit deny for that traffic exists?

Accepted Answer

Because unmatched traffic is denied by the implicit deny at the end of the ACL.. It happens because of the implicit deny at the end of the ACL. In practical terms, if the legitimate traffic does not match an earlier permit entry, it keeps moving down the list until it eventually hits the unstated final deny. That means the traffic is blocked even though there was no visible deny line for it.

This is one of the most common ACL design mistakes and one of the most important exam rules to remember.

Answer

Because the ACL automatically converts missing permits into dynamic routes.

Answer

Because every ACL line after the first permit is ignored.

Answer

Because ACLs process from bottom to top.

Question 15

What is the main operational difference between Syslog and NetFlow?

Accepted Answer

Syslog reports events and messages, while NetFlow provides visibility into traffic flows.. Syslog focuses on event and message reporting, while NetFlow focuses on traffic-flow visibility. In practical terms, Syslog helps you understand what events a device is reporting, such as configuration changes, interface state changes, or warnings. NetFlow helps you understand who is talking to whom and how much traffic is involved.

Both are useful in operations, but they answer different kinds of questions.

Answer

Syslog assigns IP addresses, while NetFlow resolves names.

Answer

NetFlow replaces the need for SNMP and routing protocols.

Answer

They are identical tools with different names.