2026 CISCO Certified Network Associate (CCNA 200-
301) Exam New Latest Version with 100 Questions,
Answers and Rationale
Question 1 Which layer of the OSI model is responsible for reliable data transfer between end
systems?
A. Physical
B. Data Link
C. Network
D. Transport Correct Answer: D
Rationale: The Transport layer (Layer 4) ensures reliable data transfer with mechanisms like
TCP’s three-way handshake and error checking. Physical handles signals, Data Link manages
framing, and Network handles routing.
Question 2 What is the purpose of the TCP three-way handshake?
A. To assign IP addresses
B. To establish a reliable connection
C. To encrypt data packets
D. To route packets to the destination Correct Answer: B
Rationale: The TCP three-way handshake (SYN, SYN-ACK, ACK) establishes a reliable
connection between two devices. It does not assign IPs, encrypt data, or route packets.
Question 3 Which of the following are components of a switch’s MAC address table? (Choose 2
answers)
A. Source IP address
B. Source MAC address
C. VLAN ID
D. Destination IP address Correct Answers: B, C
Rationale: A switch’s MAC address table maps MAC addresses to ports and VLANs. IP
addresses are not stored in the MAC table, as switches operate at Layer 2.
Question 4 What is the default subnet mask for a Class C IP address?
A. 255.0.0.0
B. 255.255.0.0
C. 255.255.255.0
D. 255.255.255.255 Correct Answer: C
Rationale: A Class C IP address uses a default subnet mask of 255.255.255.0 (/24), providing
256 addresses (254 usable) per subnet.
Question 5 Which protocol is used to automatically assign IP addresses to devices on a network?
A. DNS
B. DHCP
C. NAT
D. ARP Correct Answer: B
,Rationale: DHCP (Dynamic Host Configuration Protocol) assigns IP addresses dynamically.
DNS resolves domain names, NAT translates IP addresses, and ARP maps IP to MAC addresses.
Question 6 Drag and Drop: Drag the IPv4 network subnets from the left to the correct usable
host ranges on the right.
• 172.28.228.144/18
• 172.28.228.144/23
• 192.168.1.0/24
Options:
A. 172.28.192.1 - 172.28.255.254
B. 172.28.228.1 - 172.28.229.254
C. 192.168.1.1 - 192.168.1.254 Correct Answers:
• 172.28.228.144/18 → A
• 172.28.228.144/23 → B
• 192.168.1.0/24 → C
Rationale: For /18, increment is 64 (network 172.28.192.0, usable 172.28.192.1-
172.28.255.254). For /23, increment is 2 (network 172.28.228.0, usable 172.28.228.1-
172.28.229.254). For /24, usable range is 192.168.1.1-192.168.1.254.
Question 7 Which command displays the routing table on a Cisco router?
A. show ip route
B. show running-config
C. show interfaces
D. show mac address-table Correct Answer: A
Rationale: The show ip route command displays the routing table. show running-config shows
configuration, show interfaces shows interface status, and show mac address-table is for
switches.
Question 8 What is the purpose of VLANs in a network?
A. To increase bandwidth
B. To segment network traffic
C. To assign IP addresses
D. To encrypt data Correct Answer: B
Rationale: VLANs segment network traffic to improve security and performance by isolating
broadcast domains. They do not increase bandwidth, assign IPs, or encrypt data.
Question 9 Which protocol is used to prevent loops in a switched network?
A. RIP
B. OSPF
C. STP
D. BGP Correct Answer: C
Rationale: Spanning Tree Protocol (STP) prevents loops in Layer 2 networks. RIP, OSPF, and
BGP are routing protocols, not loop prevention mechanisms.
Question 10 Which type of cable is used to connect a switch to a router?
A. Straight-through
, B. Crossover
C. Console
D. Rollover Correct Answer: A
Rationale: A straight-through cable connects dissimilar devices (e.g., switch to router).
Crossover connects similar devices, console is for configuration, and rollover is synonymous
with console.
Question 11 What is the default administrative distance of OSPF?
A. 1
B. 90
C. 110
D. 120 Correct Answer: C
Rationale: OSPF has a default administrative distance of 110, used to determine route
preference. Static routes are 1, EIGRP is 90, and RIP is 120.
Question 12 Which of the following are benefits of using a layered network model like OSI or
TCP/IP? (Choose 2 answers)
A. Simplifies troubleshooting
B. Increases bandwidth
C. Standardizes interfaces
D. Reduces latency Correct Answers: A, C
Rationale: Layered models simplify troubleshooting by isolating issues and standardize
interfaces for interoperability. They do not directly increase bandwidth or reduce latency.
Question 13 What does the command ip address 192.168.1.1 255.255.255.0 do on a Cisco router
interface?
A. Assigns a gateway address
B. Configures a static route
C. Sets the interface IP address and subnet mask
D. Enables DHCP Correct Answer: C
Rationale: The command assigns an IP address (192.168.1.1) and subnet mask (255.255.255.0)
to the interface. It does not configure routes, gateways, or DHCP.
Question 14 Which wireless security protocol provides the strongest encryption?
A. WEP
B. WPA
C. WPA2
D. WPA3 Correct Answer: D
Rationale: WPA3 offers the strongest encryption with advanced security features. WEP is
outdated, WPA is weaker, and WPA2 is less secure than WPA3.
Question 15 Which of the following is a characteristic of UDP?
A. Uses three-way handshake
B. Guarantees delivery
C. Connectionless
D. Error correction Correct Answer: C
301) Exam New Latest Version with 100 Questions,
Answers and Rationale
Question 1 Which layer of the OSI model is responsible for reliable data transfer between end
systems?
A. Physical
B. Data Link
C. Network
D. Transport Correct Answer: D
Rationale: The Transport layer (Layer 4) ensures reliable data transfer with mechanisms like
TCP’s three-way handshake and error checking. Physical handles signals, Data Link manages
framing, and Network handles routing.
Question 2 What is the purpose of the TCP three-way handshake?
A. To assign IP addresses
B. To establish a reliable connection
C. To encrypt data packets
D. To route packets to the destination Correct Answer: B
Rationale: The TCP three-way handshake (SYN, SYN-ACK, ACK) establishes a reliable
connection between two devices. It does not assign IPs, encrypt data, or route packets.
Question 3 Which of the following are components of a switch’s MAC address table? (Choose 2
answers)
A. Source IP address
B. Source MAC address
C. VLAN ID
D. Destination IP address Correct Answers: B, C
Rationale: A switch’s MAC address table maps MAC addresses to ports and VLANs. IP
addresses are not stored in the MAC table, as switches operate at Layer 2.
Question 4 What is the default subnet mask for a Class C IP address?
A. 255.0.0.0
B. 255.255.0.0
C. 255.255.255.0
D. 255.255.255.255 Correct Answer: C
Rationale: A Class C IP address uses a default subnet mask of 255.255.255.0 (/24), providing
256 addresses (254 usable) per subnet.
Question 5 Which protocol is used to automatically assign IP addresses to devices on a network?
A. DNS
B. DHCP
C. NAT
D. ARP Correct Answer: B
,Rationale: DHCP (Dynamic Host Configuration Protocol) assigns IP addresses dynamically.
DNS resolves domain names, NAT translates IP addresses, and ARP maps IP to MAC addresses.
Question 6 Drag and Drop: Drag the IPv4 network subnets from the left to the correct usable
host ranges on the right.
• 172.28.228.144/18
• 172.28.228.144/23
• 192.168.1.0/24
Options:
A. 172.28.192.1 - 172.28.255.254
B. 172.28.228.1 - 172.28.229.254
C. 192.168.1.1 - 192.168.1.254 Correct Answers:
• 172.28.228.144/18 → A
• 172.28.228.144/23 → B
• 192.168.1.0/24 → C
Rationale: For /18, increment is 64 (network 172.28.192.0, usable 172.28.192.1-
172.28.255.254). For /23, increment is 2 (network 172.28.228.0, usable 172.28.228.1-
172.28.229.254). For /24, usable range is 192.168.1.1-192.168.1.254.
Question 7 Which command displays the routing table on a Cisco router?
A. show ip route
B. show running-config
C. show interfaces
D. show mac address-table Correct Answer: A
Rationale: The show ip route command displays the routing table. show running-config shows
configuration, show interfaces shows interface status, and show mac address-table is for
switches.
Question 8 What is the purpose of VLANs in a network?
A. To increase bandwidth
B. To segment network traffic
C. To assign IP addresses
D. To encrypt data Correct Answer: B
Rationale: VLANs segment network traffic to improve security and performance by isolating
broadcast domains. They do not increase bandwidth, assign IPs, or encrypt data.
Question 9 Which protocol is used to prevent loops in a switched network?
A. RIP
B. OSPF
C. STP
D. BGP Correct Answer: C
Rationale: Spanning Tree Protocol (STP) prevents loops in Layer 2 networks. RIP, OSPF, and
BGP are routing protocols, not loop prevention mechanisms.
Question 10 Which type of cable is used to connect a switch to a router?
A. Straight-through
, B. Crossover
C. Console
D. Rollover Correct Answer: A
Rationale: A straight-through cable connects dissimilar devices (e.g., switch to router).
Crossover connects similar devices, console is for configuration, and rollover is synonymous
with console.
Question 11 What is the default administrative distance of OSPF?
A. 1
B. 90
C. 110
D. 120 Correct Answer: C
Rationale: OSPF has a default administrative distance of 110, used to determine route
preference. Static routes are 1, EIGRP is 90, and RIP is 120.
Question 12 Which of the following are benefits of using a layered network model like OSI or
TCP/IP? (Choose 2 answers)
A. Simplifies troubleshooting
B. Increases bandwidth
C. Standardizes interfaces
D. Reduces latency Correct Answers: A, C
Rationale: Layered models simplify troubleshooting by isolating issues and standardize
interfaces for interoperability. They do not directly increase bandwidth or reduce latency.
Question 13 What does the command ip address 192.168.1.1 255.255.255.0 do on a Cisco router
interface?
A. Assigns a gateway address
B. Configures a static route
C. Sets the interface IP address and subnet mask
D. Enables DHCP Correct Answer: C
Rationale: The command assigns an IP address (192.168.1.1) and subnet mask (255.255.255.0)
to the interface. It does not configure routes, gateways, or DHCP.
Question 14 Which wireless security protocol provides the strongest encryption?
A. WEP
B. WPA
C. WPA2
D. WPA3 Correct Answer: D
Rationale: WPA3 offers the strongest encryption with advanced security features. WEP is
outdated, WPA is weaker, and WPA2 is less secure than WPA3.
Question 15 Which of the following is a characteristic of UDP?
A. Uses three-way handshake
B. Guarantees delivery
C. Connectionless
D. Error correction Correct Answer: C