CCNA Switching and Network Access Practice Test 5 — 15 Questions

Question 1

Drag and drop the following steps into the recommended order to configure a switch port for a VoIP phone (voice VLAN + data VLAN), an AP trunk, and a PoE-powered IoT device.

Accepted Answer

Enter global configuration mode, then interface configuration mode for the switch port. Configure the port as an access port in the data VLAN, enable the voice VLAN, and finally configure PoE for the IoT device.. For a switch port connecting a VoIP phone, configure the port as an access port in the data VLAN and assign a separate voice VLAN using the 'switchport voice vlan' command. Trunk mode is not required for a single phone. PoE can be configured after the VLAN settings; only global and interface configuration modes must be entered first.

Answer

Enter global configuration mode, then interface configuration mode. Configure PoE for the IoT device, then set the port as a trunk, and finally enable the voice VLAN.

Answer

Enter global configuration mode, then interface configuration mode. Configure the voice VLAN first, then set the port as a trunk, and finally configure PoE for the IoT device.

Answer

Enter interface configuration mode directly, configure the port as a trunk, enable the voice VLAN, and then configure PoE for the IoT device. Global configuration mode is not needed.

Question 2

Drag and drop the following steps into the correct order to configure RSTP and enable PortFast with BPDU Guard on a switch port, then verify the state transitions.

Accepted Answer

Configure RSTP mode globally, then enable PortFast on the interface, then enable BPDU Guard on the interface, then verify the port state transitions.. All four orders are correct because the commands are independent: the global spanning-tree mode can be set at any time, and interface commands PortFast and BPDU Guard can be enabled in any order relative to each other and to the global mode. Verification should always be performed last. There is no required sequence; candidates may mistakenly believe only one order works, but all sequences are valid on Cisco switches.

Question 3

Drag and drop the following steps into the correct order to configure PortFast and BPDU Guard on a switch interface, then verify and recover after a BPDU guard error-disable event.

Accepted Answer

Enter global configuration mode, then interface configuration mode, enable PortFast, enable BPDU Guard, verify with 'show spanning-tree interface detail', and recover by issuing 'shutdown' followed by 'no shutdown'.. Only option A provides the correct sequence: enter global config, then interface config, enable PortFast, then BPDU Guard, verify with 'show spanning-tree interface detail', and recover by cycling the interface (shutdown/no shutdown). Options B, C, and D contain incorrect verification commands, recovery methods, or configuration order.

Answer

Enter interface configuration mode, enable BPDU Guard, enable PortFast, verify with 'show running-config interface <int>', and recover by issuing 'clear spanning-tree detected-protocols'.

Answer

Enter global configuration mode, enable BPDU Guard globally, then interface configuration mode, enable PortFast, verify with 'show spanning-tree summary', and recover by reloading the switch.

Answer

Enter interface configuration mode, enable PortFast, enable BPDU Guard, verify with 'show interfaces status', and recover by issuing 'errdisable recovery cause bpduguard'.

Question 4

Drag and drop the following steps into the correct order to configure PortFast and BPDU Guard on a Cisco switch interface, then recover after a BPDU violation.

Accepted Answer

Enable PortFast, then enable BPDU Guard, then configure recovery. PortFast, BPDU Guard, and error-disable recovery configuration are independent commands; there is no required order. All listed sequences are valid, so no single option is uniquely correct.

Question 5

Drag and drop the following steps into the correct order to configure PortFast and BPDU Guard on a Cisco switch interface, then recover from a BPDU guard violation.

Accepted Answer

Enter interface configuration mode for the desired port, then configure spanning-tree portfast and spanning-tree bpduguard enable, then exit. After a BPDU guard violation, re-enable the interface using the shutdown and no shutdown commands.. Options A, B, and C describe valid configuration and recovery procedures for PortFast and BPDU Guard or Root Guard on Cisco switches. Option A applies both features per-interface with manual recovery via shutdown/no shutdown. Option B applies both globally with errdisable recovery default 300 seconds (if enabled). Option C uses Root Guard instead of BPDU Guard, which is a valid alternative. Option D is incorrect because it claims automatic recovery after 60 seconds without stating that errdisable recovery must be configured; additionally, applying BPDU Guard per-interface after PortFast globally is valid but the recovery statement is misleading without explicit configuration.

Answer

Enter global configuration mode, configure spanning-tree portfast default, then enter interface configuration mode and configure spanning-tree bpduguard enable. After a BPDU guard violation, the interface recovers automatically after 60 seconds.

Question 6

Drag and drop the STP port roles on the left to their descriptions on the right.

Accepted Answer

Root port: Provides the best path to the root bridge from a non-root switch.. The question requires matching STP port roles to descriptions. Option A correctly matches 'Root port' with 'Provides the best path to the root bridge from a non-root switch.' Option C correctly matches 'Alternate port' with 'Provides a backup path to the root bridge when the root port fails' (in RSTP). Option B is incorrect because designated ports are the forwarding ports on each segment, not backup paths. Option D is incorrect because backup ports provide redundancy for designated ports, not root ports. Thus, both A and C are correct.

Answer

Designated port: Provides a backup path to the root bridge in case the root port fails.

Answer

Backup port: Provides a backup path for the root port when the root port fails.

Question 7

Drag and drop the following steps into the correct order to capture and analyze traffic on IOS-XE using the embedded packet capture feature, and in Wireshark to isolate a Layer 2 or Layer 3 fault.

Accepted Answer

Enter privileged EXEC mode, enable capture on the interface, define buffer and filter, start capture, then export for Wireshark analysis.. The correct order for Cisco IOS-XE Embedded Packet Capture (EPC) is: 1. Enter privileged EXEC mode. 2. Enable the capture on the interface (create capture point) using commands like 'monitor capture point ip cef both'. 3. Define the buffer size and optional filter with commands like 'monitor capture buffer size ' and 'monitor capture buffer filter '. 4. Associate the capture point with the buffer (if separate) or start using 'monitor capture point start '. 5. Export the capture to a file. Options B, C, and D all deviate from this correct sequence: B defines buffer before enabling capture; C starts before enabling and defining; D starts before enabling. Only option A follows the proper order.

Question 8

Drag and drop the following steps into the correct order to capture and analyze traffic on IOS-XE using the embedded packet capture feature, and in Wireshark to isolate a Layer 2 or Layer 3 fault.

Accepted Answer

Define the capture interface, apply a filter, start capture, stop capture, export for analysis in Wireshark.. First define the capture interface, then apply a filter, start capture, stop it, and finally export for analysis in Wireshark.

Answer

Apply a filter, define the capture interface, start capture, export for analysis, stop capture.

Answer

Define the capture interface, start capture, apply a filter, stop capture, export for analysis.

Answer

Apply a filter, start capture, define the capture interface, stop capture, export for analysis.

Question 9

Drag and drop the following steps into the correct order to capture and analyze traffic on IOS-XE using the embedded packet capture feature, and in Wireshark to isolate a Layer 2 or Layer 3 fault.

Accepted Answer

Configure the capture point, define the capture buffer, start the capture, stop the capture, export the capture. The correct order for embedded packet capture on IOS-XE is: configure the capture point first (to define the traffic filter), then define the capture buffer, start the capture, stop the capture, and finally export the capture. Starting the capture after configuring both the point and buffer ensures that traffic is captured correctly. Exporting before stopping may result in incomplete data. Only option A follows this correct sequence.

Answer

Define the capture buffer, configure the capture point, start the capture, export the capture, stop the capture

Answer

Configure the capture point, start the capture, define the capture buffer, stop the capture, export the capture

Answer

Define the capture buffer, start the capture, configure the capture point, stop the capture, export the capture

Question 10

Drag and drop the following steps into the correct order to configure Root Guard on designated ports, Loop Guard on non-designated ports, and BPDU Guard on PortFast ports, including the recovery steps when a port enters err-disabled.

Accepted Answer

1. Configure Root Guard on designated ports. 2. Configure Loop Guard on non-designated ports. 3. Configure BPDU Guard on PortFast ports. 4. Enable errdisable recovery globally. 5. Manually re-enable the err-disabled port.. Only Option A correctly sequences the guards: Root Guard on designated ports, Loop Guard on non-designated ports, BPDU Guard on PortFast ports, followed by global errdisable recovery and manual re-enable. Options B, C, and D assign guards to wrong port roles, making them invalid.

Answer

1. Configure BPDU Guard on designated ports. 2. Configure Root Guard on non-designated ports. 3. Configure Loop Guard on PortFast ports. 4. Enable errdisable recovery globally. 5. Manually re-enable the err-disabled port.

Answer

1. Configure Loop Guard on designated ports. 2. Configure BPDU Guard on non-designated ports. 3. Configure Root Guard on PortFast ports. 4. Enable errdisable recovery globally. 5. Manually re-enable the err-disabled port.

Answer

1. Configure Root Guard on PortFast ports. 2. Configure Loop Guard on designated ports. 3. Configure BPDU Guard on non-designated ports. 4. Enable errdisable recovery globally. 5. Manually re-enable the err-disabled port.

Question 11

Drag and drop the following steps into the correct order to configure Root Guard on designated ports, Loop Guard on non-designated ports, and BPDU Guard on PortFast ports, including recovery steps when a port enters err-disabled.

Accepted Answer

1. Configure Root Guard on designated ports. 2. Configure Loop Guard on non-designated ports. 3. Configure BPDU Guard on PortFast ports. 4. Configure errdisable recovery for the cause (e.g., bpduguard).. The correct order to configure these STP protections is: first configure Root Guard on designated ports to prevent unwanted root bridge changes, then configure Loop Guard on non-designated ports to avoid loops, then configure BPDU Guard on PortFast ports to protect against unauthorized BPDUs, and finally configure errdisable recovery for the cause (e.g., bpduguard) to allow automatic recovery. Only option A follows this sequence; options B, C, and D are incorrect orders.

Answer

1. Configure BPDU Guard on PortFast ports. 2. Configure Loop Guard on non-designated ports. 3. Configure Root Guard on designated ports. 4. Configure errdisable recovery for the cause.

Answer

1. Configure Loop Guard on non-designated ports. 2. Configure Root Guard on designated ports. 3. Configure BPDU Guard on PortFast ports. 4. Configure errdisable recovery for the cause.

Answer

1. Configure errdisable recovery for the cause. 2. Configure Root Guard on designated ports. 3. Configure Loop Guard on non-designated ports. 4. Configure BPDU Guard on PortFast ports.

Question 12

Drag and drop the following steps into the correct order to configure an LACP EtherChannel on two Cisco switches using active mode.

Accepted Answer

Enter interface configuration mode for the physical ports (interface range gigabitethernet 0/1-2).. To configure an LACP EtherChannel in active mode, you must first enter interface configuration mode on the physical interfaces (e.g., using interface range). Next, assign those interfaces to a channel group using the channel-group command with the mode active keyword; this enables LACP negotiation and ensures the switch actively attempts to form a bundle. After the member ports are configured, you can optionally set parameters on the Port-Channel interface (such as switchport mode trunk). Finally, verify the EtherChannel is operational with show etherchannel summary. Using mode passive, on, or desirable would not enable LACP active negotiation or would use a different protocol (PAgP), which does not meet the requirement.

Question 13

Drag and drop the following steps into the correct order to configure an LACP EtherChannel on two Cisco switches.

Accepted Answer

Enter global configuration mode, select the interfaces to be part of the EtherChannel, set the channel-group mode to active on both switches, and verify the configuration.. The correct sequence to configure an LACP EtherChannel on Cisco switches is: first enter global configuration mode, then select the interfaces (e.g., using interface range), then set the channel-group mode to active on each interface, and finally verify. Option A follows this order. Option B is wrong because it starts with interface configuration mode before selecting interfaces. Option C incorrectly sets the channel-group mode globally. Option D selects interfaces before entering global configuration mode. Only option A is correct.

Answer

Enter interface configuration mode, set the channel-group mode to active, then enter global configuration mode to select the interfaces, and verify.

Answer

Enter global configuration mode, set the channel-group mode to active on both switches, then select the interfaces, and verify.

Answer

Select the interfaces, enter global configuration mode, set the channel-group mode to active, and verify.

Question 14

Drag and drop the configuration steps into the correct order to configure an LACP EtherChannel on two Cisco switches using active mode negotiation.

Accepted Answer

Configure the interface range. The correct order for configuring an LACP EtherChannel with active mode negotiation is: first, configure the interface range to enter interface configuration mode for the desired ports. Second, set the channel-group mode to active on both switches to enable LACP active negotiation. Finally, verify the EtherChannel status using 'show etherchannel summary' to confirm the channel is up and using LACP. Option D is incorrect because it reverses the order and uses a less appropriate verification command.

Answer

Set channel-group mode active, configure interface range, verify with show interfaces status

Question 15

You are connected to R1. The network has three departments: Sales (VLAN 10, 192.168.1.0/24), Engineering (VLAN 20, 192.168.2.0/24), and Management (VLAN 99, 192.168.99.0/24). A single switch SW1 connects to R1 via trunk interface G0/0. Subinterfaces for VLANs 10, 20, and 99 are already configured on R1 with correct encapsulation and IP addresses. However, inter-VLAN communication is failing. Troubleshoot and fix the configuration issue on R1 to enable routing between all VLANs.

Accepted Answer

Enable 'ip routing' globally on R1.. The router has correctly configured subinterfaces with 802.1Q encapsulation and IP addresses for VLANs 10, 20, and 99. However, 'ip routing' is disabled globally, so the router cannot forward packets between subinterfaces. Enable 'ip routing' globally to allow inter-VLAN routing. No other configuration is required; a VLAN 1 subinterface is unnecessary for these VLANs, ISL is not needed, and static routes are not required for directly connected networks.

Answer

Configure a subinterface for VLAN 1 and assign it an IP address.

Answer

Change the encapsulation on the subinterfaces from dot1Q to ISL.

Answer

Add a static route on R1 pointing to each VLAN subnet.