CCNA Network Infrastructure and Connectivity Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✓

  Router: routes between networks; Switch: forwards within LAN; Hub: repeats signals; Firewall: filters traffic; AP: provides Wi-Fi; Modem: converts digital to analog for WAN

  Why this is correct

  This correctly matches each device to its primary role as defined in networking fundamentals. Routers operate at Layer 3 to connect different networks, switches at Layer 2 for local forwarding, hubs at Layer 1 for signal repeating, firewalls for security filtering, access points for wireless connectivity, and modems for WAN signal conversion.

• ✗

  Router: forwards within LAN; Switch: routes between networks; Hub: filters traffic; Firewall: repeats signals; AP: converts digital to analog; Modem: provides Wi-Fi

  Why it's wrong here

  This is incorrect because it swaps the roles of routers and switches, and misassigns functions to hubs, firewalls, APs, and modems. Routers route between networks, not within a LAN; switches forward within a LAN; hubs repeat signals, not filter; firewalls filter traffic, not repeat; APs provide Wi-Fi, not convert signals; modems convert digital to analog, not provide Wi-Fi.

  When this WOULD be correct

  This option would be correct if the question asked to match devices to roles in a reversed or intentionally mislabeled scenario, such as 'Match each device to its secondary or less common function' or in a trick question where the roles are deliberately swapped to test knowledge of incorrect pairings.

• ✗

  Router: filters traffic; Switch: repeats signals; Hub: routes between networks; Firewall: forwards within LAN; AP: converts digital to analog; Modem: provides Wi-Fi

  Why it's wrong here

  This is incorrect because it assigns firewall functionality to a router, hub function to a switch, routing to a hub, switching to a firewall, and misplaces AP and modem roles. A firewall filters traffic, not a router; a switch forwards within a LAN, not repeat signals; a hub repeats signals, not route; a firewall filters, not forwards; an AP provides Wi-Fi, not convert; a modem converts, not provides Wi-Fi.

  When this WOULD be correct

  In a question asking to match devices to secondary or less common functions, such as 'Match each device to a possible secondary role in a network,' where options are intentionally mismatched to test deeper knowledge. For example, a router can filter traffic via ACLs, a switch can repeat signals in a broadcast domain, a hub can route in a very basic sense if it's a layer 3 hub, a firewall can forward within a LAN if configured as a transparent firewall, an AP can convert digital to analog in the RF domain, and a modem can provide Wi-Fi if it's a gateway.

• ✗

  Router: provides Wi-Fi; Switch: converts digital to analog; Hub: routes between networks; Firewall: forwards within LAN; AP: filters traffic; Modem: repeats signals

  Why it's wrong here

  This is incorrect because it assigns wireless functionality to a router, modem function to a switch, routing to a hub, switching to a firewall, firewall function to an AP, and repeating to a modem. Routers do not provide Wi-Fi (APs do); switches do not convert signals (modems do); hubs do not route; firewalls do not forward within a LAN; APs do not filter traffic (firewalls do); modems do not repeat signals (hubs do).

  When this WOULD be correct

  In a question asking to match devices to their secondary or less common functions, such as 'Match each device to a possible secondary role,' where Router could provide Wi-Fi in a home router, Switch could convert digital to analog if it includes a modem, Hub could route in a very basic sense, Firewall could forward within LAN if acting as a router, AP could filter traffic if it has firewall features, and Modem could repeat signals if it includes a repeater function.

Option-by-option analysis

Why each answer is right or wrong

Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The 200-301 exam frequently reuses these exact scenarios with slightly different constraints.

Analysis generated from the official 200-301blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”