CCNA Switching and Network Access Practice Test 4 — 15 Questions

Question 1

PCs in VLAN 30 on SwitchA cannot reach servers in VLAN 30 on SwitchB. All other VLANs work across the trunk. What is the most likely cause?

Accepted Answer

VLAN 30 is not allowed on the trunk from SwitchA.. The trunk is up and carrying multiple VLANs, but VLAN 30 is missing from the allowed list on one side. Since SwitchA and SwitchB both need to permit VLAN 30 on the trunk, if SwitchA's allowed VLAN list does not include VLAN 30, traffic for that VLAN cannot cross. Native VLAN mismatch or ISL vs 802.1Q issues would affect all VLANs, not just VLAN 30. Thus, the most likely cause is that VLAN 30 is not allowed on the trunk from SwitchA.

Answer

The native VLAN is mismatched between the switches.

Answer

VLAN 30 should be configured as the native VLAN on both ends.

Answer

SwitchB must use ISL instead of 802.1Q.

Question 2

Match each EtherChannel term or state to its most accurate meaning.

Accepted Answer

PAgP – Cisco proprietary protocol that negotiates the creation of an EtherChannel automatically.. LACP is a standards-based protocol (IEEE 802.3ad) that dynamically negotiates an EtherChannel bundle. In the port state output, 'P' (Port is in Active Port Mode) means the port is bundled into the channel. 'I' (Port is in Individual Mode) indicates the port is operating alone and not part of any bundle. 'SU' (Layer 2, In-Use) shown in the port-channel interface status confirms the logical bundle is Layer 2 and administratively up. These terms directly map to the given meanings.

Answer

LACP – Open standard protocol that dynamically creates an EtherChannel by exchanging frames.

Answer

On – Forces the interface to use EtherChannel without any negotiation protocol.

Answer

Active – LACP mode that initiates negotiation and responds to LACP packets.

Question 3

A multilayer switch must route traffic between VLAN 10 and VLAN 20. Which condition is required for that to happen?

Accepted Answer

SVIs for the VLANs plus Layer 3 routing enabled on the switch. Inter-VLAN routing on a multilayer switch depends on having functional Layer 3 gateway interfaces for the VLANs and routing enabled on the switch. In plain language, the switch needs a routed brain for each VLAN, usually in the form of SVIs, and it must actually be operating as a Layer 3 device rather than only as a pure Layer 2 switch. Without those conditions, traffic may switch inside a VLAN but cannot be routed between different VLANs.

This is a core CCNA design idea because people often assume creating VLANs alone automatically gives them inter-VLAN communication. In reality, VLANs create separation, and routing is what reconnects them under controlled conditions. A trunk between switches can carry VLAN traffic, but it does not itself perform Layer 3 routing between the VLANs. The correct answer is the requirement that makes the switch act as the gateway between VLANs.

Answer

All ports in both VLANs configured as trunks

Answer

A separate OSPF process on every access port

Answer

Port security disabled on every edge port

Question 4

Why is PortFast typically enabled on switch ports connected to end devices?

Accepted Answer

To let end-device ports reach forwarding state more quickly. PortFast is enabled so access ports connected to end devices can move to forwarding more quickly instead of waiting through the normal spanning-tree listening and learning transitions. In plain language, it helps a user’s PC, printer, or similar endpoint start communicating sooner after the link comes up. That can reduce delays at startup and prevent certain device timeout problems.

PortFast is not intended as a loop-prevention mechanism by itself, and it should not normally be used carelessly on links to other switches. That is why it is commonly paired with BPDU Guard on edge ports. The correct answer is the one focused on faster transition for end-device access links rather than on unrelated routing or VLAN functions.

Answer

To make access ports participate in OSPF

Answer

To convert all access ports into trunks

Answer

To disable Ethernet addressing on PCs

Question 5

A switchport connected to an IP phone and a PC must carry user traffic and voice traffic separately. Which feature is designed for that purpose on a Cisco access port?

Accepted Answer

Voice VLAN. The correct feature is a voice VLAN. In plain language, a voice VLAN lets the switch treat the IP phone’s traffic differently from the user PC’s traffic even though both devices may be connected through the same physical access port. The phone can tag voice traffic for the voice VLAN while the PC remains in the normal data access VLAN. This is a practical design because it keeps voice traffic logically separate, which helps with policy, QoS, and management.

This is a classic CCNA switching concept because it shows that one physical edge port can still support more than one logical traffic type in a controlled way. A standard access VLAN by itself would not provide the same voice/data separation. EtherChannel, SPAN, and native VLAN concepts solve different problems. The best answer is the feature specifically built to support phones and workstations together on one access connection while keeping their traffic logically distinct.

Answer

EtherChannel

Answer

SPAN

Answer

Native VLAN

Question 6

A switch port should allow an IP phone and attached PC to operate correctly. The phone should place voice traffic in VLAN 200 while the PC remains in VLAN 20. Which configuration approach best supports that design?

Accepted Answer

Configure the port with an access VLAN for data and a voice VLAN for the phone. The best approach is to configure the access VLAN for user data and the voice VLAN separately. In plain language, the PC should remain a normal untagged data endpoint in VLAN 20, while the phone can tag its own voice traffic for VLAN 200. Cisco access-port designs support this exact use case and allow the switch to keep voice and user traffic logically separated without requiring two physical ports.

This is a classic CCNA edge-port design. It is not a general trunking problem, and it does not require EtherChannel or router subinterfaces. The important idea is that one switchport can support an access VLAN and a voice VLAN together in a way designed specifically for IP phones with downstream PCs.

Answer

Configure the port as a routed port with no switchport

Answer

Configure the port as an EtherChannel member

Answer

Use a native VLAN only and disable all tagging

Question 7

A switch interface connected to another switch must carry VLANs 10, 20, and 30 only. Which command best enforces that requirement on the trunk?

Accepted Answer

switchport trunk allowed vlan 10,20,30. The correct command is the one that explicitly sets the allowed VLAN list on the trunk. In plain language, the administrator wants the inter-switch link to carry only the named VLANs instead of every VLAN by default. Cisco trunks can transport multiple VLANs, but that does not mean every VLAN should always be permitted. Restricting the allowed list supports cleaner design and helps reduce unnecessary VLAN transport.

This is a common CCNA switching task because it distinguishes between creating a trunk and controlling what the trunk actually carries. Simply enabling trunking is not enough when the requirement names exact VLANs. The answer must directly restrict the allowed list rather than change the native VLAN or apply an unrelated access-port command.

Answer

switchport access vlan 10,20,30

Answer

switchport mode dynamic auto

Answer

switchport trunk native vlan 10,20,30

Question 8

A port connected to an end-user PC should not send or expect VLAN tags from the endpoint. Which interface type is appropriate on the switch?

Accepted Answer

Access port. The appropriate interface type is an access port. In plain language, a normal user PC is expected to connect to one VLAN and send ordinary untagged Ethernet frames. The switch associates that traffic with the configured access VLAN. This is different from a trunk, which is designed to carry multiple VLANs and commonly uses tagging to preserve VLAN identity across the link. Routed ports are Layer 3 interfaces used for routing between VLANs, not for attaching a single end-user PC. Port-channel interfaces aggregate multiple physical links for redundancy and bandwidth, but they do not determine whether VLAN tagging is used; the underlying port mode (access or trunk) still applies. Therefore, access port is the only correct choice for an untagged, single-VLAN end-device connection.

Answer

Trunk port

Answer

Routed port

Answer

Port-channel interface

Question 9

A trunk between two switches is up, but users in VLAN 40 cannot communicate across it. The output shows both sides allow VLAN 40. What is another likely trunk-related cause to check next?

Accepted Answer

Native VLAN mismatch between the two trunk ends. If VLAN 40 is allowed on both ends and the trunk is up, a native VLAN mismatch is still worth checking because trunk problems are not limited to the allowed VLAN list. In plain language, the link may be carrying traffic, but if the two switches disagree on how untagged traffic should be treated, behavior can still become unpredictable. Native VLAN mismatches are a well-known source of warnings and unexpected traffic handling on 802.1Q trunks.

That does not mean every VLAN problem is caused by the native VLAN, but once the obvious allowed-list issue has been ruled out, it becomes a logical next trunk-specific item to verify.

Answer

Missing router ID in OSPF

Answer

Incorrect NTP source interface

Answer

Lack of PAT overload on the WAN router

Question 10

Match each VLAN-related term to its most accurate meaning.

Accepted Answer

Access VLAN: A VLAN that carries traffic for a single end device, typically assigned to an access port.. Each VLAN type serves a specific purpose: Access VLAN for end devices, Trunk VLAN for multiple VLANs over a link, Native VLAN for untagged frames, Voice VLAN for phones, Management VLAN for admin access, and Data VLAN for user traffic.

Answer

Trunk VLAN: A VLAN that carries traffic for multiple VLANs over a single link, typically using 802.1Q tagging.

Answer

Native VLAN: A VLAN that carries all untagged traffic on a trunk link, typically VLAN 1 by default.

Answer

Voice VLAN: A VLAN dedicated to carrying voice traffic, typically with QoS markings and separate from data VLANs.

Question 11

Match each STP-related feature or term to its most accurate description.

Accepted Answer

Root Bridge: The switch elected as the root of the spanning tree, from which all path costs are calculated.. PortFast moves an access port immediately to forwarding state, skipping listening/learning to speed host connectivity. BPDU Guard protects edge ports by disabling a PortFast port if any BPDU is received, preventing accidental loops. Root Guard ensures a port never becomes a root port by ignoring superior BPDUs, maintaining the intended root bridge placement. Loop Guard keeps non-designated ports in blocking when expected BPDUs are lost, avoiding loops from unidirectional links. The given matches correctly pair each feature to its precise STP behavior, and other descriptions would apply to different features like Root Bridge or Alternate Port, not to these terms.

Answer

BPDUs: Frames that carry STP information, used to elect the root bridge and detect loops.

Answer

PortFast: A feature that immediately transitions a port to forwarding state, bypassing listening and learning, used on access ports.

Answer

Rapid PVST+: Cisco's implementation of RSTP that runs a separate instance of STP per VLAN, providing faster convergence.

Question 12

Which command places a switch interface into trunking mode directly instead of relying on negotiation?

Accepted Answer

switchport mode trunk. The direct command is `switchport mode trunk`. In plain language, this tells the switch to behave as a trunk port rather than waiting to negotiate that role through DTP. That makes the administrative intent clear and avoids ambiguity. In many production environments, explicit configuration is preferred because it is easier to understand and troubleshoot than relying on negotiation behavior.

This is a core CCNA switching idea because trunks and access ports serve very different purposes. The wrong answers either describe negotiation states or commands that relate to other aspects of VLAN behavior. The best answer is the one that directly forces the interface into trunk mode instead of merely suggesting or passively waiting for trunking.

Answer

switchport access vlan 10

Answer

switchport mode dynamic auto

Answer

spanning-tree portfast

Question 13

A switch trunk is carrying several VLANs, but VLAN 99 traffic is failing. The trunk allowed list includes VLAN 99 on both sides. Which statement best explains why a VLAN can still fail even when it is allowed?

Accepted Answer

Because the VLAN may still be absent, inactive, or otherwise not operational locally even if it is allowed on the trunk. A VLAN can still fail across a trunk even when it is allowed because the allowed list is only one part of the overall design. In plain language, a switch may permit the VLAN on the link, but if the VLAN does not actually exist locally, is not active, or if some other trunk characteristic is inconsistent, traffic can still fail. This is an important CCNA troubleshooting principle: one correct line of configuration does not guarantee the full end-to-end condition is correct.

Candidates often stop at the allowed VLAN list because it is visible in common show commands. However, VLAN presence, local status, and other trunk parameters still matter. The best answer is the one recognizing that permission on the trunk does not automatically prove the entire VLAN path is healthy.

Answer

Because allowing a VLAN on a trunk automatically disables it

Answer

Because VLANs can cross trunks only when PAT is enabled

Answer

Because VLAN 99 must always be the native VLAN

Question 14

A switchport should automatically disable itself if too many MAC addresses are learned beyond the configured secure limit. Which port-security violation mode causes that behavior?

Accepted Answer

shutdown. Shutdown is the violation mode that error-disables the port. In plain language, when the switch sees a port-security violation under shutdown mode, it reacts by taking the interface out of service rather than simply dropping frames quietly. That behavior is useful when the administrator wants a clear and strong response to unauthorized devices.

This matters because port security has several violation modes and they do not behave the same way. Restrict and protect can keep the interface up, while shutdown is the mode associated with the most visible response.

Answer

protect

Answer

restrict

Answer

dynamic

Question 15

Match each trunking or switchport term to its most accurate description.

Accepted Answer

Trunk port: Carries traffic for multiple VLANs using tagging. These terms define how switchports handle VLAN traffic in trunking environments.

CCNA Switching and Network Access Practice Test 4 — 15 Questions

Exhibit

CCNA Switching and Network Access Practice Test 4 — 15 Questions

Exhibit