CCNA 2 FINAL EXAM | COMPLETE PRACTICE QUESTIONS, ANSWERS & STUDY
GUIDE 2026/2027
What are two features of a link-state routing protocol? (Choose two.)
The database information for each router is obtained from the same source.
Routers send triggered updates in response to a change.
Routers create a topology of the network by using information from other routers.
Paths are chosen based on the lowest number of hops to the designated router.
Routers send periodic updates only to neighboring routers. - ANS ✔✔Routers send triggered updates in
response to a change.
Routers create a topology of the network by using information from other routers.
Fill in the blank.
In IPv6, all routes are level ___ ultimate routes. - ANS ✔✔1
Which switching method drops frames that fail the FCS check?
ingress port buffering
cut-through switching
store-and-forward switching
borderless switching - ANS ✔✔store-and-forward switching
Which summary IPv6 static route statement can be configured to summarize only the routes to networks
2001:db8:cafe::/58 through 2001:db8:cafe:c0::/58?
ipv6 route 2001:db8:cafe::/54 S0/0/0
ipv6 route 2001:db8:cafe::/60 S0/0/0
ipv6 route 2001:db8:cafe::/62 S0/0/0
ipv6 route 2001:db8:cafe::/56 S0/0/0 - ANS ✔✔ipv6 route 2001:db8:cafe::/56 S0/0/0
When a Cisco switch receives untagged frames on a 802.1Q trunk port, which VLAN ID is the traffic
switched to by default?
data VLAN ID
,native VLAN ID
unused VLAN ID
management VLAN ID - ANS ✔✔native VLAN ID
A college marketing department has a networked storage device that uses the IP address 10.18.7.5, TCP
port 443 for encryption, and UDP port 4365 for video streaming. The college already uses PAT on the
router that connects to the Internet. The router interface has the public IP address of
209.165.200.225/30. The IP NAT pool currently uses the IP addresses ranging from 209.165.200.228-236.
Which configuration would the network administrator add to allow this device to be accessed by the
marketing personnel from home?
ip nat pool mktv 10.18.7.5 10.18.7.5
ip nat inside source static tcp 10.18.7.5 443 209.165.200.225 443
ip nat inside source static udp 10.18.7.5 4365 209.165.200.225 4365
ip nat inside source static tcp 209.165.200.225 443 10.18.7.5 443
ip nat inside source static udp 209.165.200.225 4365 10.18.7.5 4365
No additional configuration is necessary.
ip nat outside source static 10.18.7.5 209.165.200.225 - ANS ✔✔ip nat inside source static tcp 10.18.7.5
443 209.165.200.225 443
ip nat inside source static udp 10.18.7.5 4365 209.165.200.225 4365
Which statement describes a route that has been learned dynamically?
It is automatically updated and maintained by routing protocols.
It is unaffected by changes in the topology of the network.
It has an administrative distance of 1.
It is identified by the prefix C in the routing table. - ANS ✔✔It is automatically updated and maintained
by routing protocols.
A network administrator is explaining to a junior colleague the use of the lt and gt keywords when
filtering packets using an extended ACL. Where would the lt or gt keywords be used?
in an IPv6 extended ACL that stops packets going to one specific destination VLAN
in an IPv4 extended ACL that allows packets from a range of TCP ports destined for a specific network
device
, in an IPv4 named standard ACL that has specific UDP protocols that are allowed to be used on a specific
server
in an IPv6 named ACL that permits FTP traffic from one particular LAN getting to another LAN - ANS
✔✔in an IPv4 extended ACL that allows packets from a range of TCP ports destined for a specific
network device
Refer to the exhibit. How did the router obtain the last route that is shown?
https://lh5.googleusercontent.com/-9WB4O6eybPg/UvwMJFvxVaI/AAAAAAAAAkc/nYL6vo0xvXA/w501-
h93-no/10-final-ccna2.png
The ip address interface configuration mode command was used in addition to the network routing
protocol configuration mode command.
The ipv6 route command was used.
the ip route command was used.
Another router in the same organization provided the default route by using a dynamic routing protocol.
- ANS ✔✔Another router in the same organization provided the default route by using a dynamic routing
protocol.
Refer to the exhibit. A Layer 3 switch routes for three VLANs and connects to a router for Internet
connectivity. Which two configurations would be applied to the switch? (Choose two.)
https://lh6.googleusercontent.com/-jpBtoQe3Qjk/UvwMJG65rmI/AAAAAAAAAkM/8n7THtwAOxU/
w373-h293-no/11-final-ccna2.png
(config)# interface gigabitethernet 1/1
(config-if)# no switchport
(config-if)# ip address 192.168.1.2 255.255.255.252
(config)# interface vlan 1
(config-if)# ip address 192.168.1.2 255.255.255.0
(config-if)# no shutdown
(config)# interface gigabitethernet1/1
(config-if)# switchport mode trunk
(config)# interface fastethernet0/4
(config-if)# switchport mode trunk
(config)# ip routing - ANS ✔✔(config)# interface gigabitethernet 1/1
(config-if)# no switchport
https://lh4.googleusercontent.com/-GbUCK_OSi2c/UvwMNlMY8BI/AAAAAAAAAlg/lXCJRpMfInY/w699-
h165-no/5-final-ccna2.png
GUIDE 2026/2027
What are two features of a link-state routing protocol? (Choose two.)
The database information for each router is obtained from the same source.
Routers send triggered updates in response to a change.
Routers create a topology of the network by using information from other routers.
Paths are chosen based on the lowest number of hops to the designated router.
Routers send periodic updates only to neighboring routers. - ANS ✔✔Routers send triggered updates in
response to a change.
Routers create a topology of the network by using information from other routers.
Fill in the blank.
In IPv6, all routes are level ___ ultimate routes. - ANS ✔✔1
Which switching method drops frames that fail the FCS check?
ingress port buffering
cut-through switching
store-and-forward switching
borderless switching - ANS ✔✔store-and-forward switching
Which summary IPv6 static route statement can be configured to summarize only the routes to networks
2001:db8:cafe::/58 through 2001:db8:cafe:c0::/58?
ipv6 route 2001:db8:cafe::/54 S0/0/0
ipv6 route 2001:db8:cafe::/60 S0/0/0
ipv6 route 2001:db8:cafe::/62 S0/0/0
ipv6 route 2001:db8:cafe::/56 S0/0/0 - ANS ✔✔ipv6 route 2001:db8:cafe::/56 S0/0/0
When a Cisco switch receives untagged frames on a 802.1Q trunk port, which VLAN ID is the traffic
switched to by default?
data VLAN ID
,native VLAN ID
unused VLAN ID
management VLAN ID - ANS ✔✔native VLAN ID
A college marketing department has a networked storage device that uses the IP address 10.18.7.5, TCP
port 443 for encryption, and UDP port 4365 for video streaming. The college already uses PAT on the
router that connects to the Internet. The router interface has the public IP address of
209.165.200.225/30. The IP NAT pool currently uses the IP addresses ranging from 209.165.200.228-236.
Which configuration would the network administrator add to allow this device to be accessed by the
marketing personnel from home?
ip nat pool mktv 10.18.7.5 10.18.7.5
ip nat inside source static tcp 10.18.7.5 443 209.165.200.225 443
ip nat inside source static udp 10.18.7.5 4365 209.165.200.225 4365
ip nat inside source static tcp 209.165.200.225 443 10.18.7.5 443
ip nat inside source static udp 209.165.200.225 4365 10.18.7.5 4365
No additional configuration is necessary.
ip nat outside source static 10.18.7.5 209.165.200.225 - ANS ✔✔ip nat inside source static tcp 10.18.7.5
443 209.165.200.225 443
ip nat inside source static udp 10.18.7.5 4365 209.165.200.225 4365
Which statement describes a route that has been learned dynamically?
It is automatically updated and maintained by routing protocols.
It is unaffected by changes in the topology of the network.
It has an administrative distance of 1.
It is identified by the prefix C in the routing table. - ANS ✔✔It is automatically updated and maintained
by routing protocols.
A network administrator is explaining to a junior colleague the use of the lt and gt keywords when
filtering packets using an extended ACL. Where would the lt or gt keywords be used?
in an IPv6 extended ACL that stops packets going to one specific destination VLAN
in an IPv4 extended ACL that allows packets from a range of TCP ports destined for a specific network
device
, in an IPv4 named standard ACL that has specific UDP protocols that are allowed to be used on a specific
server
in an IPv6 named ACL that permits FTP traffic from one particular LAN getting to another LAN - ANS
✔✔in an IPv4 extended ACL that allows packets from a range of TCP ports destined for a specific
network device
Refer to the exhibit. How did the router obtain the last route that is shown?
https://lh5.googleusercontent.com/-9WB4O6eybPg/UvwMJFvxVaI/AAAAAAAAAkc/nYL6vo0xvXA/w501-
h93-no/10-final-ccna2.png
The ip address interface configuration mode command was used in addition to the network routing
protocol configuration mode command.
The ipv6 route command was used.
the ip route command was used.
Another router in the same organization provided the default route by using a dynamic routing protocol.
- ANS ✔✔Another router in the same organization provided the default route by using a dynamic routing
protocol.
Refer to the exhibit. A Layer 3 switch routes for three VLANs and connects to a router for Internet
connectivity. Which two configurations would be applied to the switch? (Choose two.)
https://lh6.googleusercontent.com/-jpBtoQe3Qjk/UvwMJG65rmI/AAAAAAAAAkM/8n7THtwAOxU/
w373-h293-no/11-final-ccna2.png
(config)# interface gigabitethernet 1/1
(config-if)# no switchport
(config-if)# ip address 192.168.1.2 255.255.255.252
(config)# interface vlan 1
(config-if)# ip address 192.168.1.2 255.255.255.0
(config-if)# no shutdown
(config)# interface gigabitethernet1/1
(config-if)# switchport mode trunk
(config)# interface fastethernet0/4
(config-if)# switchport mode trunk
(config)# ip routing - ANS ✔✔(config)# interface gigabitethernet 1/1
(config-if)# no switchport
https://lh4.googleusercontent.com/-GbUCK_OSi2c/UvwMNlMY8BI/AAAAAAAAAlg/lXCJRpMfInY/w699-
h165-no/5-final-ccna2.png
