CCNA Switching and Network Access Practice Test 2 — 15 Questions

Question 1

Which statement best describes the role of WPA3 in a wireless LAN design?

Accepted Answer

It is a wireless security standard used to help protect WLAN access and traffic.. WPA3 is a wireless security standard used to help protect WLAN access and wireless traffic. In practical terms, it is part of how the WLAN enforces secure client association and protects communication, not the name of the WLAN, not the AP hardware, and not the management platform.

At the CCNA level, the key is recognizing it as a WLAN security mechanism rather than confusing it with other wireless concepts.

Answer

It is the client-visible network name for the WLAN.

Answer

It is the physical radio device providing wireless coverage.

Answer

It is the centralized wireless management controller.

Question 2

Which statement best explains why guest wireless networks are often isolated from corporate internal networks?

Accepted Answer

To keep guest traffic separate from trusted internal resources and reduce exposure.. They are isolated to limit trust and reduce the risk that visitor traffic can reach internal business resources. In practical terms, guests need Internet or limited access, not the same access as managed internal users and devices. Isolation helps enforce that boundary.

This is a security and design principle, not just a convenience choice.

Answer

To make roaming faster between APs.

Answer

To replace the need for SSIDs.

Answer

To disable encryption for visitors.

Question 3

Which statement best describes why wireless clients can have very different experiences on two floors even when they use the same SSID?

Accepted Answer

Because the radio environment can differ by location even when the SSID is the same.. They can have different experiences because the SSID name alone does not describe the whole radio environment. In practical terms, AP placement, interference, channel behavior, and client density can differ by location even while the WLAN identity remains the same. That is why location-specific wireless issues often persist under a shared SSID.

This is a reminder that user experience depends on RF conditions as well as logical WLAN design.

Answer

Because the SSID forces all floors to use the same subnet mask.

Answer

Because a shared SSID disables all roaming behavior.

Answer

Because the same SSID automatically creates one giant VLAN across all sites.

Question 4

Which statement best describes why CAPWAP is relevant in controller-based WLAN troubleshooting?

Accepted Answer

It is associated with communication between lightweight APs and the controller.. CAPWAP is relevant because it is associated with communication between lightweight access points and the controller. In practical terms, when controller-based WLAN behavior is failing, the AP-controller relationship is often part of the troubleshooting path. That makes CAPWAP a relevant architectural concept.

At this level, the key is to recognize where it fits, not to memorize every packet exchange.

Answer

It is the protocol used by hosts to resolve DNS names.

Answer

It is the preferred serial WAN encapsulation for routers.

Answer

It is the same thing as WPA3 client encryption.

Question 5

Which statement best describes an SSID in wireless networking?

Accepted Answer

It is the wireless network name presented to clients.. An SSID is the wireless network name shown to clients. In practical terms, it is how users recognize and select a WLAN from the list of available networks. It is not the same thing as the AP hardware or the security algorithm protecting the WLAN.

This is a foundational wireless-recognition question and fits well in the easy progression tier.

Answer

It is the MAC address of the access point radio.

Answer

It is the encryption method used by the WLAN.

Answer

It is the default gateway for wireless hosts.

Question 6

Switch SW1 sends traffic for VLAN 30 across a trunk to SW2, but hosts in VLAN 30 on SW2 cannot communicate with hosts in VLAN 30 on SW1. Other VLANs work across the trunk. Which trunk issue is most likely?

Accepted Answer

VLAN 30 is pruned or missing from the allowed VLAN list. If only one VLAN fails across an otherwise healthy trunk, a missing or filtered VLAN in the allowed list is a common cause. Native VLAN matching and encapsulation would affect broader trunk behavior, not usually just one VLAN in this way.

Answer

The native VLAN is set to 1 on both switches

Answer

The trunk uses 802.1Q encapsulation

Answer

SW1 is the STP root bridge

Question 7

Which two functions are commonly handled by a wireless LAN controller in a controller-based deployment? (Choose two.)

Accepted Answer

Centralized management of lightweight APs. Wireless LAN controllers commonly centralize AP management and apply WLAN policies consistently across access points. They do not replace every switching or DHCP function in the network.

Answer

Per-host DHCP address assignment on every WLAN

Answer

Providing STP root bridge election for the campus

Answer

Replacing all Layer 2 switching functions in the access layer

Question 8

Two switches form an EtherChannel. One side is configured with LACP active. Which setting on the other side will successfully negotiate the bundle?

Accepted Answer

LACP passive. When one side is configured with LACP active, the other side must use LACP passive (or LACP active) to successfully negotiate the EtherChannel. PAgP desirable uses a different protocol and cannot negotiate with LACP. Options A, B, and D are incorrect: PAgP desirable and PAgP auto are PAgP modes, and 'on' forces a static channel without negotiation, none of which work with LACP active.

Answer

PAgP desirable

Answer

on

Answer

PAgP auto

Question 9

An engineer lowers the spanning-tree path cost on one uplink of a nonroot switch. What is the expected result if all else stays equal?

Accepted Answer

That uplink becomes more likely to be the root port.. Lowering the path cost on a nonroot switch's uplink reduces the cost to the root via that port, making it more likely to be chosen as the root port. Option A is wrong because root bridge election depends on bridge priority and MAC address, not local path cost changes. Option C is false because although downstream switches may eventually recalculate port roles after receiving updated BPDUs, this is not immediate and does not affect all designated ports. Option D is incorrect because BPDU transmission is governed by STP timers and port roles, not by adjusting path cost.

Answer

The switch becomes the root bridge immediately.

Answer

All designated ports on downstream switches immediately recalculate their port roles.

Answer

The switch will stop transmitting BPDUs on that port until convergence is complete.

Question 10

Which two conditions must match for a Layer 2 EtherChannel bundle to form correctly? (Choose two.)

Accepted Answer

The member interfaces must use the same speed and duplex settings.. Member interfaces must have consistent Layer 2 parameters such as speed/duplex and trunk/access characteristics.

Answer

Each member interface must be assigned a different native VLAN.

Answer

One side must use LACP and the other must use PAgP.

Question 11

Match each EtherChannel term or state to its most accurate meaning.

Accepted Answer

PAgP – Cisco proprietary protocol that negotiates the creation of an EtherChannel automatically.. PAgP is a Cisco proprietary protocol that automatically negotiates EtherChannel creation, making option A correct. LACP is an open standard (IEEE 802.3ad) that dynamically creates EtherChannels by exchanging frames, making option B correct. Option C is incorrect because 'On' is a static mode that forces EtherChannel without negotiation. Option D is incorrect because 'Active' is an LACP mode, not a protocol itself.

Answer

On – Forces the interface to use EtherChannel without any negotiation protocol.

Answer

Active – LACP mode that initiates negotiation and responds to LACP packets.

Question 12

Match each VLAN-related term to its most accurate meaning.

Accepted Answer

Access VLAN: A VLAN that carries traffic for a single end device, typically assigned to an access port.. Each VLAN type has a specific role. Access VLAN carries traffic for a single end device on an access port. Voice VLAN is dedicated to voice traffic, often with QoS, and is separate from data VLANs. Trunk VLAN is a misnomer; trunk ports carry multiple VLANs, not a 'Trunk VLAN'. Native VLAN handles untagged frames on a trunk. Therefore, Access VLAN (A) and Voice VLAN (D) are correctly matched to their descriptions.

Answer

Trunk VLAN: A VLAN that carries traffic for multiple VLANs over a single link, typically using 802.1Q tagging.

Answer

Native VLAN: A VLAN that carries all untagged traffic on a trunk link, typically VLAN 1 by default.

Answer

Voice VLAN: A VLAN dedicated to carrying voice traffic, typically with QoS markings and separate from data VLANs.

Question 13

Match each STP-related feature or term to its most accurate description.

Accepted Answer

Root Bridge: The switch elected as the root of the spanning tree, from which all path costs are calculated.. Ly defines the Root Bridge as the switch with the lowest bridge ID, from which all path costs are calculated. Options B, C, and D contain descriptions that are not the most accurate for the respective terms. B describes BPDUs as frames, but BPDU is the data unit itself; the correct definition is 'Bridge Protocol Data Unit used to exchange STP information.' C states PortFast is used only on access ports, but it applies to any edge port connecting end devices. D says Rapid PVST+ 'provides faster convergence,' which is a benefit, but the precise definition is 'Cisco implementation of Rapid Spanning Tree per VLAN.' Therefore, only A is entirely correct.

Answer

BPDUs: Frames that carry STP information, used to elect the root bridge and detect loops.

Answer

PortFast: A feature that immediately transitions a port to forwarding state, bypassing listening and learning, used on access ports.

Answer

Rapid PVST+: Cisco's implementation of RSTP that runs a separate instance of STP per VLAN, providing faster convergence.

Question 14

Match each access-layer feature to its most accurate function.

Accepted Answer

VLAN access ports assign a single VLAN to a switch port, separating traffic at Layer 2.. The question asks to match each access-layer feature to its most accurate function. Option A correctly states that VLAN access ports assign a single VLAN to a switch port, separating traffic at Layer 2. This is the primary function of an access port. Option B is incorrect because trunk ports are not considered access-layer features; they are used between switches to carry multiple VLANs. Option C is incorrect because while PortFast does bypass STP listening and learning, the description is not the most accurate function; PortFast is specifically designed for edge ports connected to end hosts to speed up convergence. Option D is incorrect because Voice VLAN separates voice traffic from data traffic, but the description misses that it works in conjunction with an access port. Thus, only Option A provides the most accurate match.

Answer

Trunk ports carry traffic for multiple VLANs and use tagging to identify VLAN membership.

Answer

PortFast immediately transitions a port to forwarding state, bypassing STP listening and learning.

Answer

Voice VLAN separates voice traffic from data traffic by placing IP phones in a dedicated VLAN.

Question 15

Match each switchport or trunking concept to its most accurate role.

Accepted Answer

Access port. Access port carries traffic for a single VLAN. Trunk port carries traffic for multiple VLANs between switches. Dynamic Desirable and Dynamic Auto are DTP negotiation modes, not port roles. Since the stem asks to match each concept to its role, both A and B are correct.

Answer

Dynamic Desirable

Answer

Dynamic Auto