Cisco CCNA 200-301 Exam 2026: The Industry Standard
for Network Engineering Certification – Complete Guide &
Practice Questions
1. Which layer of the OSI model is responsible for logical addressing and routing?
A) Data Link Layer (Layer 2)
B) Network Layer (Layer 3)
C) Transport Layer (Layer 4)
D) Session Layer (Layer 5)
Correct Answer: B – Network Layer (Layer 3)
The Network Layer (Layer 3) handles logical addressing (IP addresses) and routing,
determining the best path for data to travel across networks. The Data Link Layer handles
physical addressing (MAC addresses). The Transport Layer handles end-to-end
communication and reliability. The Session Layer manages sessions between applications.
2. Which protocol operates at the Transport Layer and provides reliable,
connection-oriented communication?
A) UDP
B) TCP
C) IP
D) ICMP
Correct Answer: B – TCP
TCP (Transmission Control Protocol) provides reliable, connection-oriented
communication using a three-way handshake, sequence numbers, and acknowledgments.
UDP is connectionless and unreliable. IP operates at the Network Layer. ICMP is used for
diagnostic and error messages.
,3. What is the default subnet mask for a Class B IP address?
A) 255.0.0.0
B) 255.255.0.0
C) 255.255.255.0
D) 255.255.255.255
Correct Answer: B – 255.255.0.0
Class B addresses (128.0.0.0 – 191.255.255.255) use a default subnet mask of 255.255.0.0,
providing 65,534 usable host addresses. Class A uses 255.0.0.0. Class C uses 255.255.255.0.
A /32 mask is 255.255.255.255.
4. Which type of cable uses light pulses to transmit data and is immune to
electromagnetic interference?
A) Cat 6 UTP
B) Cat 6a STP
C) Fiber optic
D) Coaxial
Correct Answer: C – Fiber optic
Fiber optic cables transmit data as light pulses, making them completely immune to
electromagnetic interference (EMI) and radio frequency interference (RFI). Copper cables
(UTP, STP, coaxial) are susceptible to EMI, though STP has shielding that reduces it.
5. What is the broadcast address for the subnet 192.168.10.0/26?
A) 192.168.10.63
B) 192.168.10.64
C) 192.168.10.255
D) 192.168.10.62
,Correct Answer: A – 192.168.10.63
A /26 subnet mask (255.255.255.192) provides 64 addresses per subnet. The first subnet is
192.168.10.0, and the broadcast address is the last address in the range: 192.168.10.63.
The block size is 64 (256 − 192 = 64). The network address is 192.168.10.0 and the next
subnet starts at 192.168.10.64.
6. Which IPv6 address type is used for one-to-many communication where packets
are delivered to all interested nodes?
A) Unicast
B) Multicast
C) Anycast
D) Broadcast
Correct Answer: B – Multicast
IPv6 multicast addresses (starting with FF00::/8) deliver packets to multiple interested
nodes. Unicast delivers to a single interface. Anycast delivers to the nearest interface in a
group. IPv6 does not use broadcast addresses; multicast replaces broadcast functionality.
7. Which device operates at Layer 2 and forwards frames based on MAC addresses?
A) Router
B) Switch
C) Hub
D) Modem
Correct Answer: B – Switch
A switch operates at Layer 2 (Data Link Layer) and forwards frames based on MAC
addresses, creating separate collision domains for each port. Routers operate at Layer 3
based on IP addresses. Hubs broadcast to all ports without intelligence. Modems convert
signals for ISP connections.
, 8. What is the purpose of ARP?
A) To resolve domain names to IP addresses
B) To resolve IP addresses to MAC addresses
C) To assign IP addresses dynamically
D) To encrypt network traffic
Correct Answer: B – To resolve IP addresses to MAC addresses
ARP (Address Resolution Protocol) maps a known IP address to a MAC address on the
local network. DNS resolves domain names to IP addresses. DHCP assigns IP addresses.
Encryption is a separate function.
9. Which TCP/UDP port is used by HTTPS?
A) 80
B) 443
C) 22
D) 3389
Correct Answer: B – 443
HTTPS (Hypertext Transfer Protocol Secure) uses port 443 for encrypted web
communication. Port 80 is HTTP. Port 22 is SSH. Port 3389 is RDP.
10. What is the primary function of a router?
A) To forward frames based on MAC addresses
B) To connect different networks and forward packets based on IP addresses
C) To provide wireless connectivity
D) To convert digital signals to analog
Correct Answer: B – To connect different networks and forward packets based on
IP addresses
for Network Engineering Certification – Complete Guide &
Practice Questions
1. Which layer of the OSI model is responsible for logical addressing and routing?
A) Data Link Layer (Layer 2)
B) Network Layer (Layer 3)
C) Transport Layer (Layer 4)
D) Session Layer (Layer 5)
Correct Answer: B – Network Layer (Layer 3)
The Network Layer (Layer 3) handles logical addressing (IP addresses) and routing,
determining the best path for data to travel across networks. The Data Link Layer handles
physical addressing (MAC addresses). The Transport Layer handles end-to-end
communication and reliability. The Session Layer manages sessions between applications.
2. Which protocol operates at the Transport Layer and provides reliable,
connection-oriented communication?
A) UDP
B) TCP
C) IP
D) ICMP
Correct Answer: B – TCP
TCP (Transmission Control Protocol) provides reliable, connection-oriented
communication using a three-way handshake, sequence numbers, and acknowledgments.
UDP is connectionless and unreliable. IP operates at the Network Layer. ICMP is used for
diagnostic and error messages.
,3. What is the default subnet mask for a Class B IP address?
A) 255.0.0.0
B) 255.255.0.0
C) 255.255.255.0
D) 255.255.255.255
Correct Answer: B – 255.255.0.0
Class B addresses (128.0.0.0 – 191.255.255.255) use a default subnet mask of 255.255.0.0,
providing 65,534 usable host addresses. Class A uses 255.0.0.0. Class C uses 255.255.255.0.
A /32 mask is 255.255.255.255.
4. Which type of cable uses light pulses to transmit data and is immune to
electromagnetic interference?
A) Cat 6 UTP
B) Cat 6a STP
C) Fiber optic
D) Coaxial
Correct Answer: C – Fiber optic
Fiber optic cables transmit data as light pulses, making them completely immune to
electromagnetic interference (EMI) and radio frequency interference (RFI). Copper cables
(UTP, STP, coaxial) are susceptible to EMI, though STP has shielding that reduces it.
5. What is the broadcast address for the subnet 192.168.10.0/26?
A) 192.168.10.63
B) 192.168.10.64
C) 192.168.10.255
D) 192.168.10.62
,Correct Answer: A – 192.168.10.63
A /26 subnet mask (255.255.255.192) provides 64 addresses per subnet. The first subnet is
192.168.10.0, and the broadcast address is the last address in the range: 192.168.10.63.
The block size is 64 (256 − 192 = 64). The network address is 192.168.10.0 and the next
subnet starts at 192.168.10.64.
6. Which IPv6 address type is used for one-to-many communication where packets
are delivered to all interested nodes?
A) Unicast
B) Multicast
C) Anycast
D) Broadcast
Correct Answer: B – Multicast
IPv6 multicast addresses (starting with FF00::/8) deliver packets to multiple interested
nodes. Unicast delivers to a single interface. Anycast delivers to the nearest interface in a
group. IPv6 does not use broadcast addresses; multicast replaces broadcast functionality.
7. Which device operates at Layer 2 and forwards frames based on MAC addresses?
A) Router
B) Switch
C) Hub
D) Modem
Correct Answer: B – Switch
A switch operates at Layer 2 (Data Link Layer) and forwards frames based on MAC
addresses, creating separate collision domains for each port. Routers operate at Layer 3
based on IP addresses. Hubs broadcast to all ports without intelligence. Modems convert
signals for ISP connections.
, 8. What is the purpose of ARP?
A) To resolve domain names to IP addresses
B) To resolve IP addresses to MAC addresses
C) To assign IP addresses dynamically
D) To encrypt network traffic
Correct Answer: B – To resolve IP addresses to MAC addresses
ARP (Address Resolution Protocol) maps a known IP address to a MAC address on the
local network. DNS resolves domain names to IP addresses. DHCP assigns IP addresses.
Encryption is a separate function.
9. Which TCP/UDP port is used by HTTPS?
A) 80
B) 443
C) 22
D) 3389
Correct Answer: B – 443
HTTPS (Hypertext Transfer Protocol Secure) uses port 443 for encrypted web
communication. Port 80 is HTTP. Port 22 is SSH. Port 3389 is RDP.
10. What is the primary function of a router?
A) To forward frames based on MAC addresses
B) To connect different networks and forward packets based on IP addresses
C) To provide wireless connectivity
D) To convert digital signals to analog
Correct Answer: B – To connect different networks and forward packets based on
IP addresses
