CCNA PRACTICE TEST QUESTIONS 1 | COMPLETE PRACTICE QUESTIONS,
ANSWERS & STUDY GUIDE 2026/2027
From a network perspective, how is a server a different endpoint than a user workstation? - ANS ✔✔A
server requires more bandwidth.
Which two characteristics apply to small office/home office (SOHO) routers? - ANS ✔✔They have a web-
based administration interface and they have integrated security functionality.
What is the purpose of the metric parameter of a route? - ANS ✔✔It binds a numeric value to the path
to a network.
Where should a firewall be located to protect a network from the public Internet? - ANS ✔✔Between
the Internet and the edge router.
What are two reasons for choosing Transport Layer Security over IP Security encryption? - ANS ✔✔IPsec
requires dedicated software installed on host, and TLS can be used for encrypting traffic to public
websites. IPsec can encrypt the entire I P packet, while TLS encrypts only the application level data,
which makes IPsec a more flexible choice for a broader range of applications.
How do you view the DHCP assigned IP address lease time on a Cisco device? - ANS ✔✔With the
command show I P DHCP binding.
What 3 characteristics differentiate Ansible from other automation tools? - ANS ✔✔It is agentless, it is
written in Python, and it uses YAML definitions.
What task makes configuring network devices more efficient and reduces errors? - ANS ✔✔Device
provisioning configures network devices more efficiently, faster, and with fewer errors because human
interaction with each network device is decreased.
Give two implementation characteristics of MPLS VPN. - ANS ✔✔1) The service provider network can be
represented as a router from the customer perspective. 2) The service provide can implement MPLS
L3VPN.
You have set up a SOHO to work from home and are using broadband internet with a remote-access VPN
to connect to your company resources. How can you establish a VPN tunnel? - ANS ✔✔You can use a
web browser to establish a VPN tunnel. Remote-access VPN allows you to establish VPNs using VPN-
client software or a web-based client. Remote-access VPNs are not statically set up. Site-to-site VPNs
require VPN-capable devices to connect to the VPN gateway on the company's side.
Which two types of cables can be used to connect to the console port of a Cisco router? - ANS
✔✔Rollover or USB.
Which type of cable is typically used to connect a core switch with a data center switch, where
bandwidth higher than 40 Gbps and low cost are required? - ANS ✔✔Multimode fiber.
, In which situation would you choose to use UDP instead of TCP for IP applications? - ANS ✔✔When
speed of delivery is more important than error correction in IP packet transmissions.
What three fields are included in a TCP header? - ANS ✔✔Destination port, Flags, and Window size.
What happens when an IPv6 address autoconfigures itself? - ANS ✔✔The 7th bit of the I P address is
flipped.
Which type of address is automatically assigned to a physical interface when IPv6 is enabled on that
interface? - ANS ✔✔A link-local address.
Give 3 characteristics that apply to the 802.1Q protocol. - ANS ✔✔1) It carries untagged frames. 2) It
modifies the 802.3 frame header. 3) It uses an internal tagging mechanism.
What happens if a port that is assigned to a VLAN is shut down? - ANS ✔✔If a port or the VLAN assigned
to it are shut down, no traffic can flow through.
Which component is used to generate a signal for single-mode fiber connections? - ANS ✔✔A laser
transmitter.
Can acccess points have more than one SSID? - ANS ✔✔An administrator can create several SSID's on
the same access point.
Which cloud service model offers customers the most control over their cloud-hosted services? - ANS
✔✔Infrastructure as a service, or IaaS.
What are 2 examples of full hypervisors? - ANS ✔✔Type-1 and Type-2. The type-1 hypervisor is also
called the bare metal hypervisor, and is installed directly on hardware. The type-2 hypervisor is installed
inside an OS, such as Linux or Windows.
Which two commands are used to verify a default gateway configuration on a Layer 2 switch? - ANS
✔✔show ip-default gateway and show running-config.
command is used to set 192.168.1.1 as the default gateway on a Layer 2 switch? - ANS ✔✔ip default-
gateway 192.168.1.1.
How can you check if a port is err-disabled? - ANS ✔✔You can check the status of an interface with the
show interfaces Ethernet 0/3 command, using Ethernet 0/3 in this example. The err-disabled interface is
the result of a Security Action Shutdown. The port will be shut down, but its status will be err-disabled.
How do you view the security violation count for any given interface? - ANS ✔✔With the show port-
security command.
How do you fix a port that has been disabled? - ANS ✔✔You can shut down and enable the interface
with the shutdown command followed by the no shutdown command. You can also use the errdisable
recovery command to recover err-disabled ports, depending on the cause.
ANSWERS & STUDY GUIDE 2026/2027
From a network perspective, how is a server a different endpoint than a user workstation? - ANS ✔✔A
server requires more bandwidth.
Which two characteristics apply to small office/home office (SOHO) routers? - ANS ✔✔They have a web-
based administration interface and they have integrated security functionality.
What is the purpose of the metric parameter of a route? - ANS ✔✔It binds a numeric value to the path
to a network.
Where should a firewall be located to protect a network from the public Internet? - ANS ✔✔Between
the Internet and the edge router.
What are two reasons for choosing Transport Layer Security over IP Security encryption? - ANS ✔✔IPsec
requires dedicated software installed on host, and TLS can be used for encrypting traffic to public
websites. IPsec can encrypt the entire I P packet, while TLS encrypts only the application level data,
which makes IPsec a more flexible choice for a broader range of applications.
How do you view the DHCP assigned IP address lease time on a Cisco device? - ANS ✔✔With the
command show I P DHCP binding.
What 3 characteristics differentiate Ansible from other automation tools? - ANS ✔✔It is agentless, it is
written in Python, and it uses YAML definitions.
What task makes configuring network devices more efficient and reduces errors? - ANS ✔✔Device
provisioning configures network devices more efficiently, faster, and with fewer errors because human
interaction with each network device is decreased.
Give two implementation characteristics of MPLS VPN. - ANS ✔✔1) The service provider network can be
represented as a router from the customer perspective. 2) The service provide can implement MPLS
L3VPN.
You have set up a SOHO to work from home and are using broadband internet with a remote-access VPN
to connect to your company resources. How can you establish a VPN tunnel? - ANS ✔✔You can use a
web browser to establish a VPN tunnel. Remote-access VPN allows you to establish VPNs using VPN-
client software or a web-based client. Remote-access VPNs are not statically set up. Site-to-site VPNs
require VPN-capable devices to connect to the VPN gateway on the company's side.
Which two types of cables can be used to connect to the console port of a Cisco router? - ANS
✔✔Rollover or USB.
Which type of cable is typically used to connect a core switch with a data center switch, where
bandwidth higher than 40 Gbps and low cost are required? - ANS ✔✔Multimode fiber.
, In which situation would you choose to use UDP instead of TCP for IP applications? - ANS ✔✔When
speed of delivery is more important than error correction in IP packet transmissions.
What three fields are included in a TCP header? - ANS ✔✔Destination port, Flags, and Window size.
What happens when an IPv6 address autoconfigures itself? - ANS ✔✔The 7th bit of the I P address is
flipped.
Which type of address is automatically assigned to a physical interface when IPv6 is enabled on that
interface? - ANS ✔✔A link-local address.
Give 3 characteristics that apply to the 802.1Q protocol. - ANS ✔✔1) It carries untagged frames. 2) It
modifies the 802.3 frame header. 3) It uses an internal tagging mechanism.
What happens if a port that is assigned to a VLAN is shut down? - ANS ✔✔If a port or the VLAN assigned
to it are shut down, no traffic can flow through.
Which component is used to generate a signal for single-mode fiber connections? - ANS ✔✔A laser
transmitter.
Can acccess points have more than one SSID? - ANS ✔✔An administrator can create several SSID's on
the same access point.
Which cloud service model offers customers the most control over their cloud-hosted services? - ANS
✔✔Infrastructure as a service, or IaaS.
What are 2 examples of full hypervisors? - ANS ✔✔Type-1 and Type-2. The type-1 hypervisor is also
called the bare metal hypervisor, and is installed directly on hardware. The type-2 hypervisor is installed
inside an OS, such as Linux or Windows.
Which two commands are used to verify a default gateway configuration on a Layer 2 switch? - ANS
✔✔show ip-default gateway and show running-config.
command is used to set 192.168.1.1 as the default gateway on a Layer 2 switch? - ANS ✔✔ip default-
gateway 192.168.1.1.
How can you check if a port is err-disabled? - ANS ✔✔You can check the status of an interface with the
show interfaces Ethernet 0/3 command, using Ethernet 0/3 in this example. The err-disabled interface is
the result of a Security Action Shutdown. The port will be shut down, but its status will be err-disabled.
How do you view the security violation count for any given interface? - ANS ✔✔With the show port-
security command.
How do you fix a port that has been disabled? - ANS ✔✔You can shut down and enable the interface
with the shutdown command followed by the no shutdown command. You can also use the errdisable
recovery command to recover err-disabled ports, depending on the cause.
