CCNA Switching and Network Access Practice Test 26 — 15 Questions

Question 1

Refer to the exhibit. A network administrator connects an IP phone to interface GigabitEthernet1/0/1 on a Cisco Catalyst switch. The PC connected through the phone works normally on the data VLAN, but the phone cannot obtain an IP address and fails to register with the call server. Which action will resolve the problem?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Add 'switchport voice vlan 20' on interface GigabitEthernet1/0/1.. The PC works on the data VLAN, but the phone cannot obtain an IP address, indicating the phone is not receiving the correct VLAN assignment. The phone should be placed in the voice VLAN (VLAN 20) using the 'switchport voice vlan 20' command, which allows the switch to tag the phone's traffic with VLAN 20 via CDP/LLDP, enabling it to get an IP from the voice VLAN DHCP server.

Answer

Configure 'switchport trunk allowed vlan 10,20' on interface Gi1/0/1 and change the switchport mode to trunk.

Answer

Issue 'switchport access vlan 20' and 'switchport voice vlan 10' on interface Gi1/0/1.

Answer

Enable 'switchport port-security mac-address sticky' on the interface and manually add the phone’s MAC address to the access VLAN.

Question 2

A network engineer has configured an LACP EtherChannel between Switch1 and Switch2 by assigning interfaces to channel-group 1 with the mode passive on both switches. The engineer issues the show etherchannel summary command on Switch1 and sees the output below. The Port-channel interface remains down. Which action resolves the issue?

Accepted Answer

Change the mode on one switch to active.. When both switches are configured with LACP mode passive, neither switch initiates the negotiation process because passive mode only responds to incoming LACP packets. By changing one side to active mode, that switch will actively send LACP packets, allowing the EtherChannel to form. The Port-channel interface remains down due to this negotiation failure, not because of VLAN or physical mismatch issues.

Answer

Configure the switchport mode as trunk on both sides.

Answer

Verify that the native VLAN matches on both sides of the trunk.

Answer

Correct the speed and duplex settings on the member ports.

Question 3

An administrator connects a new access-layer switch to a distribution switch. The link comes up but remains in a blocking state and does not forward frames. The administrator issues the show command shown in the exhibit. What is the most likely reason the link is blocked?

Accepted Answer

Root Guard is configured on the port, and the new access switch is sending superior BPDUs, triggering a root-inconsistent state.. The link is blocked because Root Guard is configured on the distribution switch port. When the new access-layer switch sends superior BPDUs (with a lower bridge priority), Root Guard transitions the port to a root-inconsistent (blocking) state to protect the current root bridge from being usurped. This prevents the new switch from becoming the root bridge, which would disrupt the spanning-tree topology.

Answer

BPDU Guard is enabled on the port, and the new switch's BPDUs caused the port to enter err-disable state.

Answer

Loop Guard is enabled, and the port has stopped receiving BPDUs, leading to a loop-inconsistent state.

Answer

The port is configured with PortFast, and the new switch's BPDU triggered a loop, causing the port to err-disable.

Question 4

A user connects a Cisco IP Phone with a PC attached to the phone's PC port to switch interface GigabitEthernet0/5. The PC obtains an IP address and can reach the network, but the phone displays "Configuring IP" and never registers. Based on the exhibit outputs, what is the most likely cause?

Accepted Answer

VLAN 20 has not been created in the switch's VLAN database.. The PC obtains an IP address and can reach the network, indicating that the access VLAN (likely VLAN 1 or the native VLAN) is functioning. However, the phone displays 'Configuring IP' and never registers, which means it cannot obtain an IP address on its voice VLAN. The most likely cause is that VLAN 20, which is configured as the voice VLAN on the switchport, has not been created in the switch's VLAN database. Without the VLAN existing, the switch cannot forward traffic or DHCP requests for that VLAN, leaving the phone stuck in the IP configuration phase.

Answer

The switchport must be configured as a trunk to support voice VLANs.

Answer

The native VLAN on the trunk ports between the switch and the DHCP server is incorrectly set to VLAN 10.

Answer

The phone is manually configured to use VLAN 10 for voice traffic instead of VLAN 20.

Question 5

Which TWO statements about 802.1Q trunking, native VLANs, and inter-VLAN routing are correct? (Choose two.)

Accepted Answer

By default, frames belonging to the native VLAN are sent untagged across an 802.1Q trunk.. By default, 802.1Q trunking treats the native VLAN (typically VLAN 1) as untagged. Frames in the native VLAN are sent without an 802.1Q tag, allowing interoperability with devices that do not understand trunking. This behavior is defined in IEEE 802.1Q and is essential for backward compatibility.

Answer

802.1Q trunking is a Cisco-proprietary protocol that uses a 4-byte tag to identify VLAN membership.

Answer

Inter-VLAN routing can be accomplished using a Layer 2 switch configured with VLAN access maps.

Answer

Switches strip the 802.1Q tag from all frames before forwarding them out of a trunk port.

Question 6

Drag and drop the items on the left to match the descriptions on the right.

Accepted Answer

switchport mode trunk: Configures a trunk port. VLANs segment a switch into multiple broadcast domains. 802.1Q trunking encapsulates frames with a VLAN tag, while the native VLAN carries untagged traffic. 'switchport mode trunk' configures a trunk port, 'show vlan brief' lists VLAN assignments, and inter-VLAN routing enables communication between VLANs typically using a router or Layer 3 switch.

Answer

VLAN: Encapsulates frames with a VLAN tag

Answer

802.1Q trunking: Carries untagged traffic on a trunk

Answer

Native VLAN: Segments a switch into multiple broadcast domains

Question 7

Drag and drop the items on the left to match the descriptions on the right.

Accepted Answer

Access port: Carries traffic for a single VLAN, configured with switchport mode access.. Access ports carry traffic for a single VLAN and are configured with switchport mode access. Voice VLANs are added to an access port with switchport voice vlan to separate voice and data traffic. Trunk ports carry multiple VLANs and are set with switchport mode trunk; allowed VLANs can be restricted with switchport trunk allowed vlan.

Answer

Voice VLAN: Added to a trunk port to prioritize voice traffic.

Answer

Allowed VLANs: Configured with switchport access vlan to restrict VLANs on a trunk.

Question 8

Drag and drop the following steps into the correct order to configure inter-VLAN routing using a router-on-a-stick topology.

Accepted Answer

On the switch, create the necessary VLANs (e.g., VLAN 10 and VLAN 20) using the 'vlan' command.. Inter-VLAN routing via router-on-a-stick requires creating VLANs on the switch, placing access ports in those VLANs, configuring a trunk to the router with the correct native VLAN to avoid mismatch, enabling the physical router interface, and then defining subinterfaces per VLAN with 802.1Q encapsulation and IP addresses. This ensures traffic from different VLANs can be routed.

Question 9

An administrator notices that hosts in VLAN 30 on SW1 cannot communicate with hosts in VLAN 30 on SW2, even though both switches are connected via an 802.1Q trunk. Traffic for VLANs 10 and 20 passes without issues across the same trunk. The trunk is configured to allow all VLANs, and the allowed VLAN list explicitly includes VLAN 30. What is the most likely cause of the problem?

Accepted Answer

The native VLAN is mismatched between SW1 and SW2, and VLAN 30 is the native VLAN on one side.. The most likely cause is a native VLAN mismatch. When the native VLAN is mismatched on an 802.1Q trunk, traffic for the native VLAN is not tagged, so frames from VLAN 30 on one switch are received as untagged frames on the other switch and placed into the switch's configured native VLAN. If the native VLAN on one side is VLAN 30 and on the other side is a different VLAN (e.g., VLAN 1), the hosts in VLAN 30 cannot communicate because the frames are interpreted as belonging to different VLANs. Traffic for VLANs 10 and 20 passes because they are not the native VLAN and are properly tagged.

Answer

The trunk encapsulation is set to ISL on one switch and 802.1Q on the other.

Answer

Spanning Tree Protocol has placed VLAN 30 in a blocking state on the trunk link.

Answer

The switched virtual interface (SVI) for VLAN 30 on SW1 is administratively down.

Question 10

A network administrator implements a set of spanning-tree enhancements to secure the switching infrastructure. Later, a help desk ticket reports that a user in a remote office cannot connect to any network resources. While investigating, the administrator notices that the switch port connecting the remote office switch to the distribution switch is in a 'root-inconsistent' state and is blocking traffic. Which protection feature, if misapplied, most likely caused this issue?

Accepted Answer

Root Guard. Root Guard is the correct answer because it forces an interface to be a designated port. If a switch receives a superior BPDU (indicating a root bridge with a lower bridge ID) on a Root Guard-enabled port, the port is placed into a 'root-inconsistent' state and blocks traffic to prevent the attached switch from becoming the root bridge. This matches the symptom described: a port in 'root-inconsistent' state blocking traffic after spanning-tree enhancements were applied.

Answer

Loop Guard

Answer

BPDU Guard

Answer

BPDU Filter

Question 11

A network engineer configures an EtherChannel between two switches. Switch A's interface is set with channel-group 1 mode active, while Switch B's identical interface is set with channel-group 1 mode auto. When verifying with show etherchannel summary, the engineer observes that the port-channel interface is down and the physical interfaces are not bundled. What is the most likely cause of the problem?

Accepted Answer

The mode 'auto' is a PAgP negotiation mode that is incompatible with the LACP active mode.. 'active' is an LACP mode that initiates negotiations, while 'auto' is a PAgP mode that passively waits for PAgP packets. Since LACP and PAgP are incompatible protocols, the interfaces will never negotiate a bundle, leaving the port-channel down. The engineer must use matching protocol modes (e.g., both LACP active/passive or both PAgP desirable/auto) for EtherChannel to form.

Answer

The LACP system priority on the active side must be lower than the auto side.

Answer

LACP requires one side to be active and the other passive; two active interfaces will not bundle.

Answer

The physical interfaces must be shut down and then re-enabled after configuring LACP for the bundle to form.

Question 12

A network technician notices CDP native VLAN mismatch warnings between switches SW1 and SW2 on their trunk link. The technician runs 'show interfaces trunk' on SW1 and sees native VLAN 1, then on SW2 and sees native VLAN 99. Data traffic is currently passing, but the mismatch can cause broadcast loops. What should the technician do next?

Accepted Answer

Configure the native VLAN to match on both ends of the trunk.. The correct action is to configure the native VLAN to match on both ends of the trunk. CDP reports a native VLAN mismatch when the native VLANs differ on the two sides of a trunk link. Although data traffic may still pass because 802.1Q does not tag frames on the native VLAN, the mismatch can cause broadcast loops and security risks, as frames from one native VLAN may be misinterpreted on the other side. Setting both sides to the same native VLAN (e.g., VLAN 1 or VLAN 99) resolves the mismatch and ensures proper Layer 2 behavior.

Answer

Add VLAN 99 to the allowed VLAN list on the trunk interface of SW1.

Answer

Remove the trunk configuration and set both interfaces as access ports in VLAN 1.

Answer

Enable spanning‑tree PortFast on the trunk ports.

Question 13

A technician is troubleshooting a network issue where hosts in VLAN 20 on SW1 cannot communicate with hosts in VLAN 20 on SW2. Both switches are connected by an Ethernet trunk link that is up/up and configured as a trunk. The VLAN databases on both switches include VLAN 20, and the spanning tree for VLAN 20 is in a forwarding state on all ports. Hosts within VLAN 20 on each switch can communicate with each other locally. What is the most likely cause?

Accepted Answer

VLAN 20 is not in the switchport trunk allowed VLAN list on the trunk port between SW1 and SW2.. The most likely cause is that VLAN 20 is not included in the allowed VLAN list on the trunk port between SW1 and SW2. Even though the trunk is up/up and VLAN 20 exists in the VLAN database, the switchport trunk allowed vlan command restricts which VLANs can traverse the trunk. If VLAN 20 is omitted from this list, frames from VLAN 20 will be dropped at the trunk, preventing inter-switch communication for that VLAN.

Answer

The native VLAN is mismatched on the two ends of the trunk.

Answer

VLAN 20 has not been created in the VLAN database on SW2.

Answer

The trunk encapsulation is mismatched between SW1 and SW2.

Question 14

Refer to the exhibit. A network administrator connects an IP phone to interface GigabitEthernet1/0/1 on a Cisco Catalyst switch. The PC connected through the phone works normally on the data VLAN, but the phone cannot obtain an IP address and fails to register with the call server. Which action will resolve the problem?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

VLAN 50 is not in the allowed VLAN list on the trunk.. The 'show interfaces GigabitEthernet0/1 trunk' output would list the allowed VLANs on the trunk. If VLAN 50 is not included in the allowed VLAN list, traffic from VLAN 50 will be dropped at the trunk, preventing hosts on SW1 from reaching devices outside SW1. This is the most likely cause because the trunk is up but VLAN 50 traffic is not forwarded.

Answer

The native VLAN on the trunk is misconfigured, causing VLAN 50 traffic to be dropped.

Answer

The trunk is operating in access mode instead of trunk mode, preventing VLAN 50 traffic.

Answer

Spanning tree protocol has blocked the trunk port for VLAN 50, isolating the hosts.

Question 15

Refer to the exhibit. A network engineer is troubleshooting a connectivity issue on SW3. A host connected to the same segment as SW3's GigabitEthernet0/0 interface cannot reach any network resources. The engineer issues the show spanning-tree vlan 10 command and receives the output shown. Based on the output, what is the most likely cause?

Accepted Answer

The interface GigabitEthernet0/0 is in the Blocking state because it received a superior BPDU, making it an alternate port to the root bridge.. The output shows that GigabitEthernet0/0 is in the Blocking state for VLAN 10. In Rapid PVST+ or classic STP, a port enters the Blocking state when it receives a superior BPDU (i.e., a BPDU with a lower bridge ID or lower path cost to the root), causing it to become an alternate (or backup) port rather than a designated or root port. This prevents the host from reaching network resources because the port does not forward traffic.

Answer

GigabitEthernet0/0 is administratively down, which prevents the host from communicating.

Answer

The port is in the Blocking state because the switch detected a loop and moved the port to error-disabled state.

Answer

The port is blocked because SW3 has a lower bridge priority than the root bridge and should be the designated port for that segment.