CCNA Switching and Network Access Practice Test 5 — 15 Questions

Question 1

Drag and drop the following steps into the recommended order to configure a switch port for a VoIP phone (voice VLAN + data VLAN), an AP trunk, and a PoE-powered IoT device.

Accepted Answer

Enter global configuration mode, then interface configuration mode for the switch port. Configure the port as an access port in the data VLAN, enable the voice VLAN, and finally configure PoE for the IoT device.. For a switch port connecting a VoIP phone, configure the port as an access port in the data VLAN and assign a separate voice VLAN using the 'switchport voice vlan' command. Trunk mode is not required for a single phone. PoE can be configured after the VLAN settings; only global and interface configuration modes must be entered first.

Answer

Enter global configuration mode, then interface configuration mode. Configure PoE for the IoT device, then set the port as a trunk, and finally enable the voice VLAN.

Answer

Enter global configuration mode, then interface configuration mode. Configure the voice VLAN first, then set the port as a trunk, and finally configure PoE for the IoT device.

Answer

Enter interface configuration mode directly, configure the port as a trunk, enable the voice VLAN, and then configure PoE for the IoT device. Global configuration mode is not needed.

Question 2

Which of the following sequences correctly configures and verifies PortFast and BPDU Guard on a Cisco IOS-XE switch interface, and then recovers after a BPDU guard violation?

Accepted Answer

Enter global configuration mode, then interface configuration mode, enable PortFast, enable BPDU Guard, verify with show commands, and recover by shutting down and no shutting down the interface.. The correct sequence is described in option A: enter global configuration mode, then interface configuration mode, enable PortFast first, then BPDU Guard, verify with show commands, and recover by shutting down and no shutting down the interface. Options B, C, and D are incorrect because they contain errors such as wrong order of enabling features, improper recovery methods (reload, removal of BPDU Guard, or clear errdisable interface), or enabling BPDU Guard globally. Only option A follows the proper Cisco IOS-XE procedure for configuring and recovering from a BPDU guard violation.

Question 3

Drag and drop the following steps into the correct order to configure RSTP and enable PortFast with BPDU Guard on a switch port, then verify the state transitions.

Accepted Answer

Configure RSTP mode globally, then enable PortFast on the interface, then enable BPDU Guard on the interface, then verify the port state transitions.. All four orders are correct because the commands are independent: the global spanning-tree mode can be set at any time, and interface commands PortFast and BPDU Guard can be enabled in any order relative to each other and to the global mode. Verification should always be performed last. There is no required sequence; candidates may mistakenly believe only one order works, but all sequences are valid on Cisco switches.

Question 4

Drag and drop the following steps into the correct order to configure PortFast and BPDU Guard on a switch interface, then verify and recover after a BPDU guard error-disable event.

Accepted Answer

Enter global configuration mode, then interface configuration mode, enable PortFast, enable BPDU Guard, verify with 'show spanning-tree interface detail', and recover by issuing 'shutdown' followed by 'no shutdown'.. Only option A provides the correct sequence: enter global config, then interface config, enable PortFast, then BPDU Guard, verify with 'show spanning-tree interface detail', and recover by cycling the interface (shutdown/no shutdown). Options B, C, and D contain incorrect verification commands, recovery methods, or configuration order.

Answer

Enter interface configuration mode, enable BPDU Guard, enable PortFast, verify with 'show running-config interface <int>', and recover by issuing 'clear spanning-tree detected-protocols'.

Answer

Enter global configuration mode, enable BPDU Guard globally, then interface configuration mode, enable PortFast, verify with 'show spanning-tree summary', and recover by reloading the switch.

Answer

Enter interface configuration mode, enable PortFast, enable BPDU Guard, verify with 'show interfaces status', and recover by issuing 'errdisable recovery cause bpduguard'.

Question 5

Drag and drop the following steps into the correct order to configure PortFast and BPDU Guard on a switch access port, and then recover after a BPDU Guard error-disable event.

Accepted Answer

Enter global configuration mode, then interface configuration mode, enable PortFast, enable BPDU Guard, and after an error-disable event, manually re-enable the interface using the 'shutdown' command followed by the 'no shutdown' command.. This drag-and-drop question presents four distinct step sequences, each representing a valid method to configure PortFast and BPDU Guard on an access port and handle a BPDU Guard error-disable event. Option A describes the manual recovery method: enter global config, interface config, enable PortFast, enable BPDU Guard, then manually recover with 'shutdown' followed by 'no shutdown'. Option B describes automatic recovery using the 'errdisable recovery cause bpduguard' global command, which must be configured before the error occurs. Option C describes an alternative using the 'clear spanning-tree bpduguard' command to recover without manual interface reset. Option D uses the global default 'spanning-tree portfast bpduguard default' command. All sequences are correct when ordered properly for their specific approach.

Question 6

Drag and drop the following steps into the correct order to configure PortFast and BPDU Guard on a Cisco switch interface, then recover after a BPDU violation.

Accepted Answer

Enable PortFast, then enable BPDU Guard, then configure recovery. PortFast, BPDU Guard, and error-disable recovery configuration are independent commands; there is no required order. All listed sequences are valid, so no single option is uniquely correct.

Question 7

Drag and drop the following steps into the correct order to configure PortFast and BPDU Guard on a Cisco switch interface, then recover from a BPDU guard violation.

Accepted Answer

Enter interface configuration mode for the desired port, then configure spanning-tree portfast and spanning-tree bpduguard enable, then exit. After a BPDU guard violation, re-enable the interface using the shutdown and no shutdown commands.. Options A, B, and C describe valid configuration and recovery procedures for PortFast and BPDU Guard or Root Guard on Cisco switches. Option A applies both features per-interface with manual recovery via shutdown/no shutdown. Option B applies both globally with errdisable recovery default 300 seconds (if enabled). Option C uses Root Guard instead of BPDU Guard, which is a valid alternative. Option D is incorrect because it claims automatic recovery after 60 seconds without stating that errdisable recovery must be configured; additionally, applying BPDU Guard per-interface after PortFast globally is valid but the recovery statement is misleading without explicit configuration.

Answer

Enter global configuration mode, configure spanning-tree portfast default, then enter interface configuration mode and configure spanning-tree bpduguard enable. After a BPDU guard violation, the interface recovers automatically after 60 seconds.

Question 8

Drag and drop the STP port roles on the left to their descriptions on the right.

Accepted Answer

Root port: Provides the best path to the root bridge from a non-root switch.. The question requires matching STP port roles to descriptions. Option A correctly matches 'Root port' with 'Provides the best path to the root bridge from a non-root switch.' Option C correctly matches 'Alternate port' with 'Provides a backup path to the root bridge when the root port fails' (in RSTP). Option B is incorrect because designated ports are the forwarding ports on each segment, not backup paths. Option D is incorrect because backup ports provide redundancy for designated ports, not root ports. Thus, both A and C are correct.

Answer

Designated port: Provides a backup path to the root bridge in case the root port fails.

Answer

Backup port: Provides a backup path for the root port when the root port fails.

Question 9

Drag and drop the following steps into the correct order to capture and analyze traffic on IOS-XE using the embedded packet capture feature, then export the capture for analysis in Wireshark to isolate a Layer 2 or Layer 3 fault.

Accepted Answer

Define the capture point specifying the interface and direction (monitor capture point command). First, define the capture point. Then start the capture. After capturing sufficient data, stop the capture to release resources. Finally, export the capture to a TFTP server for analysis.

Question 10

Drag and drop the following steps into the correct order to capture and analyze traffic on IOS-XE using the embedded packet capture feature, and in Wireshark to isolate a Layer 2 or Layer 3 fault.

Accepted Answer

Enter privileged EXEC mode, enable capture on the interface, define buffer and filter, start capture, then export for Wireshark analysis.. The correct order for Cisco IOS-XE Embedded Packet Capture (EPC) is: 1. Enter privileged EXEC mode. 2. Enable the capture on the interface (create capture point) using commands like 'monitor capture point ip cef both'. 3. Define the buffer size and optional filter with commands like 'monitor capture buffer size ' and 'monitor capture buffer filter '. 4. Associate the capture point with the buffer (if separate) or start using 'monitor capture point start '. 5. Export the capture to a file. Options B, C, and D all deviate from this correct sequence: B defines buffer before enabling capture; C starts before enabling and defining; D starts before enabling. Only option A follows the proper order.

Question 11

Drag and drop the following steps into the correct order to configure Root Guard on designated ports, Loop Guard on non-designated ports, and BPDU Guard on PortFast ports, including the recovery steps when a port enters err-disabled.

Accepted Answer

1. Configure Root Guard on designated ports. 2. Configure Loop Guard on non-designated ports. 3. Configure BPDU Guard on PortFast ports. 4. Enable errdisable recovery globally. 5. Manually re-enable the err-disabled port.. Only Option A correctly sequences the guards: Root Guard on designated ports, Loop Guard on non-designated ports, BPDU Guard on PortFast ports, followed by global errdisable recovery and manual re-enable. Options B, C, and D assign guards to wrong port roles, making them invalid.

Answer

1. Configure BPDU Guard on designated ports. 2. Configure Root Guard on non-designated ports. 3. Configure Loop Guard on PortFast ports. 4. Enable errdisable recovery globally. 5. Manually re-enable the err-disabled port.

Answer

1. Configure Loop Guard on designated ports. 2. Configure BPDU Guard on non-designated ports. 3. Configure Root Guard on PortFast ports. 4. Enable errdisable recovery globally. 5. Manually re-enable the err-disabled port.

Answer

1. Configure Root Guard on PortFast ports. 2. Configure Loop Guard on designated ports. 3. Configure BPDU Guard on non-designated ports. 4. Enable errdisable recovery globally. 5. Manually re-enable the err-disabled port.

Question 12

Drag and drop the following steps into the correct order to configure Root Guard on designated ports, Loop Guard on non-designated ports, and BPDU Guard on PortFast ports, including recovery steps when a port enters err-disabled.

Accepted Answer

1. Configure Root Guard on designated ports. 2. Configure Loop Guard on non-designated ports. 3. Configure BPDU Guard on PortFast ports. 4. Configure errdisable recovery for the cause (e.g., bpduguard).. The correct order to configure these STP protections is: first configure Root Guard on designated ports to prevent unwanted root bridge changes, then configure Loop Guard on non-designated ports to avoid loops, then configure BPDU Guard on PortFast ports to protect against unauthorized BPDUs, and finally configure errdisable recovery for the cause (e.g., bpduguard) to allow automatic recovery. Only option A follows this sequence; options B, C, and D are incorrect orders.

Answer

1. Configure BPDU Guard on PortFast ports. 2. Configure Loop Guard on non-designated ports. 3. Configure Root Guard on designated ports. 4. Configure errdisable recovery for the cause.

Answer

1. Configure Loop Guard on non-designated ports. 2. Configure Root Guard on designated ports. 3. Configure BPDU Guard on PortFast ports. 4. Configure errdisable recovery for the cause.

Answer

1. Configure errdisable recovery for the cause. 2. Configure Root Guard on designated ports. 3. Configure Loop Guard on non-designated ports. 4. Configure BPDU Guard on PortFast ports.

Question 13

Drag and drop the following steps into the correct order to configure an LACP EtherChannel on two Cisco switches.

Accepted Answer

Enter global configuration mode, select the interfaces to be part of the EtherChannel, set the channel-group mode to active on both switches, and verify the configuration.. The correct sequence to configure an LACP EtherChannel on Cisco switches is: first enter global configuration mode, then select the interfaces (e.g., using interface range), then set the channel-group mode to active on each interface, and finally verify. Option A follows this order. Option B is wrong because it starts with interface configuration mode before selecting interfaces. Option C incorrectly sets the channel-group mode globally. Option D selects interfaces before entering global configuration mode. Only option A is correct.

Answer

Enter interface configuration mode, set the channel-group mode to active, then enter global configuration mode to select the interfaces, and verify.

Answer

Enter global configuration mode, set the channel-group mode to active on both switches, then select the interfaces, and verify.

Answer

Select the interfaces, enter global configuration mode, set the channel-group mode to active, and verify.

Question 14

Drag and drop the following steps into the correct order to configure an LACP EtherChannel on two Cisco switches.

Accepted Answer

Enter global configuration mode on both switches.. To configure LACP EtherChannel on two Cisco switches, the correct order is: first, enter global configuration mode on both switches (A). Next, create the port-channel interface using the 'interface port-channel' command (B). Finally, assign the physical interfaces to the port-channel using the 'channel-group' command with LACP active mode (D). Step C ('Set the LACP mode to active on the physical interfaces') is not a separate step because the mode is configured as part of the channel-group command. Therefore, the proper sequence is A, B, D.

Question 15

Drag and drop the configuration steps into the correct order to configure an LACP EtherChannel on two Cisco switches using active mode negotiation.

Accepted Answer

Configure the interface range. The correct order for configuring an LACP EtherChannel with active mode negotiation is: first, configure the interface range to enter interface configuration mode for the desired ports. Second, set the channel-group mode to active on both switches to enable LACP active negotiation. Finally, verify the EtherChannel status using 'show etherchannel summary' to confirm the channel is up and using LACP. Option D is incorrect because it reverses the order and uses a less appropriate verification command.

Answer

Set channel-group mode active, configure interface range, verify with show interfaces status