Free practice test · no sign-up
Cisco CCNAFree Cisco Certified Network Associate practice test
10 real Cisco CCNA practice questions with instant answers and explanations — no account, no credit card, no email. Score yourself, then unlock the full bank of 600questions whenever you’re ready. The Cisco CCNA passing score is Variable (~825/1000).
A clothing retailer uses a cloud-hosted platform to manage customer relationships without maintaining any underlying infrastructure. Which cloud service model does this represent?
Answer key
All 10 Cisco CCNA questions & answers
Prefer to just read the answers and explanations? Here’s the full key for this free Cisco CCNA test.
Q1. A clothing retailer uses a cloud-hosted platform to manage customer relationships without maintaining any underlying infrastructure. Which cloud service model does this represent?
Correct answer: D. SaaS
Software as a Service (SaaS) delivers a fully operational application over the cloud. The consumer only uses the software and has no responsibility for the underlying hardware, operating system, or platform. Platform as a Service (PaaS) gives developers a cloud environment in which to build and deploy their own applications. Infrastructure as a Service (IaaS) lets customers rent compute, storage, and networking resources on demand. Function as a Service (FaaS) hosts a single discrete function in the cloud.
Q2. An enterprise network team is designing the topology for a new corporate LAN. Which of the following topology choices is least appropriate for a large corporate environment?
Correct answer: C. A single combo device providing wired Ethernet ports, a router, and Wi-Fi in one box
A device that bundles routing, switching, and wireless functionality into one unit is typical of a small office/home office (SOHO) setup, not a large corporate LAN. Two-tier, three-tier, and distribution-based topologies are all standard enterprise LAN designs intended for organizations with many users.
Q3. A technician is diagnosing network connectivity on a Windows workstation. Which command reveals the assigned IP address, subnet mask, and default gateway?
Correct answer: D. ipconfig
Running ipconfig on a Windows host outputs the IP address, subnet mask, and default gateway for each network adapter. The ping utility sends test packets to verify reachability to another host. The nslookup tool queries DNS servers to resolve names to addresses. The netstat command reports active network connections and listening ports, not interface configuration.
Q4. A network designer must choose a subnet mask that accommodates at least 60 usable host addresses. Which mask should be selected?
Correct answer: C. 255.255.255.192 (/26)
A /26 prefix (255.255.255.192) yields 64 total addresses, of which 62 are assignable to hosts after reserving the network and broadcast addresses — sufficient for 60 hosts. A /27 mask supports only 30 usable addresses. A /28 supports 14 usable addresses, and a /29 supports only 6, all of which fall short of the 60-host requirement.
Q5. A network engineer needs to consolidate several physical servers onto fewer machines for better hardware utilization. Separately, the engineer must keep each customer's routing table isolated on a single shared router. Which two virtualization technologies address these two requirements respectively? (Choose two.)
Correct answer: C. Server virtualization
Server virtualization lets multiple virtual machines run on one physical host, consolidating workloads and reducing the number of physical servers needed. Virtual Routing and Forwarding (VRF) creates separate, isolated routing table instances on a single physical router, making it ideal for segregating per-customer routing. Containers package application code and its dependencies for portable deployment but do not consolidate full server workloads or isolate routing tables. VLAN trunking segments Layer 2 broadcast domains but does not provide routing-table isolation or server consolidation.
Q6. A home-based entrepreneur wants one device that handles wired internet access for a desktop PC and also provides Wi-Fi for smartphones and tablets. What is the consumer-market name for this type of device?
Correct answer: B. Wireless router
In the consumer market, a wireless router is the familiar all-in-one device found in SOHO environments. It integrates an Ethernet switch, a wireless access point, a firewall, and a modem into a single unit. A wireless LAN controller (WLC) is enterprise equipment used to centrally manage a fleet of access points. An access point (AP) creates a wireless network but does not include routing or modem functions. An Ethernet switch provides wired connectivity only. A modem performs signal conversion between network media but does not route or switch on its own.
Q7. A switch has just forwarded the same frame out of several different ports simultaneously. Which frame type could NOT be responsible for this behavior?
Correct answer: B. Known unicast frame
When a switch has an entry for a destination MAC address in its forwarding table, it sends the frame out only the single port associated with that address — never multiple ports. An unknown unicast frame is flooded to every port except the one it arrived on because the destination is not in the table. Broadcast and multicast frames are also delivered to all ports other than the ingress port.
Q8. A switch receives a frame whose destination MAC address is absent from its forwarding table, so it transmits the frame out every port except the one it came in on. What is this behavior called?
Correct answer: B. Frame flooding
Frame flooding occurs when a switch transmits a frame out all ports except the ingress port. This happens for broadcast frames and for unknown unicast frames where the destination MAC is not yet in the table. Frame switching refers to forwarding a frame to a specific port based on a known destination address. MAC learning is the process of recording a source MAC address and its associated port into the forwarding table. MAC aging is the automatic removal of stale entries from the table after a timer expires.
Q9. A switch receives a frame and finds the destination MAC address already recorded in its forwarding table. What action will the switch take?
Correct answer: C. Forward the frame out only the matching port
When a destination MAC address is found in the forwarding table, the switch delivers the frame exclusively to the port mapped to that address, avoiding unnecessary traffic on other segments. A switch only floods a frame to all ports (excluding the source) when the destination is unknown. Discarding occurs in special cases such as when the source and destination ports are identical. Transmitting to all ports, including the source, is never correct behavior.
Q10. Under 802.11 wireless standards, what term describes any device that is capable of communicating over a Wi-Fi network?
Correct answer: D. STA
Any 802.11-capable device — whether a laptop, smartphone, or access point — is classified as a station (STA). A basic service set (BSS) refers to the coverage cell formed by an access point and its associated clients. A service set identifier (SSID) is the human-readable wireless network name. A basic service set identifier (BSSID) is the unique hardware-level identifier of a specific access point radio.
Exam facts and objectives sourced from the official Cisco certification page. Last reviewed June 2026.
Ready for the full Cisco CCNA bank? Start free.
600 questions, timed mock exams, and missed-question review — 30 free questions, no card.
Start free trial