CCNA Switching and Network Access — 40 Questions

Question 1

What is the main purpose of a VLAN on a switch?

Accepted Answer

To create a separate Layer 2 broadcast domain. A VLAN separates switch ports into distinct Layer 2 broadcast domains, improving segmentation and reducing unnecessary broadcast scope.

Answer

To encrypt user traffic on the switch

Answer

To increase the physical speed of switch ports

Answer

To replace the need for a default gateway

Question 2

Which statement best describes a lightweight access point in a controller-based WLAN?

Accepted Answer

It relies on a wireless LAN controller for centralized management and policy. In a controller-based wireless design, lightweight APs depend on a wireless LAN controller for centralized policy and management functions.

Answer

It performs all management and control functions independently

Answer

It can support only a single SSID

Answer

It cannot use PoE

Question 3

What is the purpose of Power over Ethernet (PoE)?

Accepted Answer

To deliver electrical power over Ethernet cabling. PoE allows network devices such as IP phones, wireless access points, and cameras to receive power through the same Ethernet cable used for data.

Answer

To encrypt Ethernet frames

Answer

To compress voice traffic on a LAN

Answer

To increase the maximum IPv4 MTU

Question 4

What does an access port do on a switch?

Accepted Answer

Connects to a single VLAN for endpoint traffic. An access port carries traffic for a single VLAN and sends frames untagged by default to end devices.

Answer

Carries multiple VLANs using 802.1Q tags

Answer

Disables spanning tree on the interface

Answer

Forwards only multicast traffic

Question 5

What is the main purpose of BPDU Guard on a PortFast-enabled access port?

Accepted Answer

To shut down an access port if a BPDU is received. BPDU Guard helps prevent accidental loops by shutting down a PortFast port if it receives a BPDU.

Answer

To elect the root bridge faster

Answer

To convert all trunks to routed ports

Answer

To allow BPDUs only from trusted access points

Question 6

Which statement best explains why trunks are needed between switches in a multi-VLAN environment?

Accepted Answer

They allow multiple VLANs to share one physical inter-switch link while preserving VLAN identity. Trunks are needed because they allow traffic from multiple VLANs to cross a single physical link between switches. In plain language, instead of using one cable per VLAN between switches, a trunk can carry many VLANs at once while preserving their identity through tagging. That makes the design much more scalable and practical in real networks.

Without trunking, only one VLAN’s traffic could normally use a simple access link at a time. In larger environments, that would quickly become messy and wasteful. CCNA questions often focus on this basic reason for trunks: efficient transport of multiple logically separate VLANs over one physical inter-switch connection.

Answer

They force every host port to become a routed port

Answer

They eliminate the need for VLAN tagging

Answer

They replace the need for IP addressing on switches

Question 7

Which statement best compares 2.4 GHz and 5 GHz Wi-Fi operation at a basic CCNA level?

Accepted Answer

2.4 GHz and 5 GHz have different tradeoffs in coverage characteristics and channel availability.. At a basic level, 2.4 GHz generally offers broader compatibility and longer reach characteristics, while 5 GHz commonly offers more channels and higher potential throughput with shorter effective reach in many environments. In practical terms, the key exam point is not memorizing every radio detail, but recognizing that the two bands have different tradeoffs.

This is a foundational wireless concept. The wrong answers usually pretend one band is universally superior in every respect, which is not how real design works.

Answer

5 GHz is used only for wired Ethernet uplinks.

Answer

2.4 GHz eliminates the need for SSIDs.

Answer

Both bands are actually ACL types.

Question 8

What is the primary role of a wireless LAN controller in a controller-based WLAN design?

Accepted Answer

To centralize management and control of access points and wireless policies. The primary role of a wireless LAN controller is to centralize the management and control of access points and wireless policies. In practical terms, instead of configuring every AP independently, the controller provides a single place to define SSIDs, security settings, RF-related policies, and operational behavior. This improves consistency and simplifies administration at scale.

The controller does not replace the access points physically. It coordinates them. That is the key distinction in controller-based WLAN design.

Answer

To replace all access points physically on the network

Answer

To act as the default gateway for all wired VLANs automatically

Answer

To convert every wireless frame into an OSPF packet

Question 9

Which statement best describes an SSID in a wireless LAN?

Accepted Answer

It is the name that identifies a wireless LAN to users and client devices.. An SSID is the network name that identifies a wireless LAN to users and client devices. In practical terms, it is the label a person sees when choosing between available Wi-Fi networks. It is not the security protocol itself and it is not the access point hardware. It is the identifier associated with the WLAN.

This is basic wireless vocabulary, but it matters because exam questions often put SSID next to AP, WPA2, and controller terms to see whether you can separate them.

Answer

It is the encryption algorithm used by the WLAN.

Answer

It is the physical antenna inside an access point.

Answer

It is the CAPWAP tunnel between the AP and controller.

Question 10

Which statement best describes why PortFast is usually appropriate on a user-facing access port but not on a normal switch-to-switch uplink?

Accepted Answer

Because PortFast is intended for edge ports and a normal uplink participates in the spanning-tree topology.. PortFast is appropriate on a user-facing access port because it speeds an edge port into forwarding without waiting through the normal STP transition. In practical terms, that improves startup behavior for hosts such as PCs and printers. On a normal switch-to-switch uplink, however, the link participates in spanning-tree topology decisions, so treating it like a simple edge port can introduce risk.

This is a standard access-layer design principle. PortFast is for endpoints, not ordinary infrastructure uplinks.

Answer

Because PortFast can be used only on routers.

Answer

Because switch-to-switch links cannot forward traffic.

Answer

Because PortFast automatically enables NAT on access ports.

Question 11

Which statement best describes CAPWAP in a controller-based WLAN environment?

Accepted Answer

It is associated with communication between access points and the wireless LAN controller.. CAPWAP is associated with communication between access points and the wireless LAN controller in a controller-based WLAN. In practical terms, it supports the control relationship and, depending on design, can also relate to the handling of wireless traffic between the AP and controller environment. At CCNA level, the important point is that it is tied to AP-controller operation.

The common mistake is to confuse CAPWAP with a wireless security standard or with a normal SSID.

Answer

It is the same thing as WPA3 encryption.

Answer

It is the client-visible name of the WLAN.

Answer

It is the default route used by wireless clients.

Question 12

Which statement best describes the purpose of a wireless security standard such as WPA2 or WPA3?

Accepted Answer

To help protect WLAN access and the confidentiality of wireless traffic.. A wireless security standard such as WPA2 or WPA3 is used to help protect access to the WLAN and the confidentiality of wireless traffic. In practical terms, it is part of how the network controls who can join the WLAN and how wireless communication is protected. It is not the SSID, the controller itself, or the radio band.

At the CCNA level, the important point is recognizing it as a WLAN security mechanism.

Answer

To assign the SSID name visible to wireless clients.

Answer

To replace the wireless LAN controller in small deployments.

Answer

To select which radio band the AP uses.

Question 13

Which statement best describes the difference between lightweight APs in a controller-based WLAN and autonomous APs?

Accepted Answer

A lightweight AP is designed to work with centralized controller-based management, while an autonomous AP is managed more independently.. A lightweight AP depends on a controller-based architecture for centralized management, while an autonomous AP is configured more independently. In practical terms, the lightweight AP is part of a broader managed system, whereas the autonomous AP behaves more like a standalone device with its own local configuration.

This distinction matters because CCNA wireless questions often test whether you understand the architecture, not just the radio itself. The AP role changes depending on whether a controller is present.

Answer

A lightweight AP cannot transmit wireless traffic at all.

Answer

An autonomous AP must always use CAPWAP to function.

Answer

Only autonomous APs can broadcast SSIDs.

Question 14

What is the main reason a WLAN design might choose a controller-based architecture instead of managing each AP separately?

Accepted Answer

To centralize management and make policy deployment more consistent across many APs.. The main reason is centralized management and policy consistency. In practical terms, a controller-based design makes it easier to deploy many APs with shared settings, security policies, and operational control. That improves scalability and reduces the effort of configuring devices one by one.

This is the architectural value proposition of the controller model. It is about coordination and consistency at scale.

Answer

To eliminate the need for access points entirely.

Answer

To make DHCP unnecessary on wireless networks.

Answer

To replace all VLANs with SSIDs.

Question 15

Which statement best describes why 5 GHz WLAN deployments are often discussed separately from 2.4 GHz deployments?

Accepted Answer

Because 2.4 GHz and 5 GHz have different design tradeoffs and are not operationally identical.. They are discussed separately because the bands have different operating characteristics and design tradeoffs. In practical terms, they differ in channel behavior, client support patterns, and practical coverage characteristics. The key CCNA-level idea is not that one is always better, but that the two bands are not identical from a design perspective.

This is a foundational wireless planning concept rather than a deep RF engineering question.

Answer

Because 5 GHz is only for wired uplinks and not for wireless clients.

Answer

Because 2.4 GHz eliminates the need for WPA security.

Answer

Because 5 GHz networks cannot use controllers.

Question 16

Which statement best describes the role of WPA3 in a wireless LAN design?

Accepted Answer

It is a wireless security standard used to help protect WLAN access and traffic.. WPA3 is a wireless security standard used to help protect WLAN access and wireless traffic. In practical terms, it is part of how the WLAN enforces secure client association and protects communication, not the name of the WLAN, not the AP hardware, and not the management platform.

At the CCNA level, the key is recognizing it as a WLAN security mechanism rather than confusing it with other wireless concepts.

Answer

It is the client-visible network name for the WLAN.

Answer

It is the physical radio device providing wireless coverage.

Answer

It is the centralized wireless management controller.

Question 17

Which statement best explains why guest wireless networks are often isolated from corporate internal networks?

Accepted Answer

To keep guest traffic separate from trusted internal resources and reduce exposure.. They are isolated to limit trust and reduce the risk that visitor traffic can reach internal business resources. In practical terms, guests need Internet or limited access, not the same access as managed internal users and devices. Isolation helps enforce that boundary.

This is a security and design principle, not just a convenience choice.

Answer

To make roaming faster between APs.

Answer

To replace the need for SSIDs.

Answer

To disable encryption for visitors.

Question 18

Which statement best describes why wireless clients can have very different experiences on two floors even when they use the same SSID?

Accepted Answer

Because the radio environment can differ by location even when the SSID is the same.. They can have different experiences because the SSID name alone does not describe the whole radio environment. In practical terms, AP placement, interference, channel behavior, and client density can differ by location even while the WLAN identity remains the same. That is why location-specific wireless issues often persist under a shared SSID.

This is a reminder that user experience depends on RF conditions as well as logical WLAN design.

Answer

Because the SSID forces all floors to use the same subnet mask.

Answer

Because a shared SSID disables all roaming behavior.

Answer

Because the same SSID automatically creates one giant VLAN across all sites.

Question 19

Which statement best describes why CAPWAP is relevant in controller-based WLAN troubleshooting?

Accepted Answer

It is associated with communication between lightweight APs and the controller.. CAPWAP is relevant because it is associated with communication between lightweight access points and the controller. In practical terms, when controller-based WLAN behavior is failing, the AP-controller relationship is often part of the troubleshooting path. That makes CAPWAP a relevant architectural concept.

At this level, the key is to recognize where it fits, not to memorize every packet exchange.

Answer

It is the protocol used by hosts to resolve DNS names.

Answer

It is the preferred serial WAN encapsulation for routers.

Answer

It is the same thing as WPA3 client encryption.

Question 20

Which statement best describes an SSID in wireless networking?

Accepted Answer

It is the wireless network name presented to clients.. An SSID is the wireless network name shown to clients. In practical terms, it is how users recognize and select a WLAN from the list of available networks. It is not the same thing as the AP hardware or the security algorithm protecting the WLAN.

This is a foundational wireless-recognition question and fits well in the easy progression tier.

Answer

It is the MAC address of the access point radio.

Answer

It is the encryption method used by the WLAN.

Answer

It is the default gateway for wireless hosts.