Cisco Certified Support Technician (CCST) Networking practice questions
200 free questions with answers and explanations.
- 51.A network engineer is designing an IPv6 network for a large organization. The organization requires a highly scalable routing protocol that supports various network topologies and can converge quickly. Which IPv6 routing protocol would be the most appropriate choice for this scenario?IP Connectivity
- 52.A network administrator is troubleshooting an issue where a router is not forwarding traffic to a newly added subnet. The routing table shows no entry for the destination subnet. Which of the following is the most likely reason for this issue?IP Connectivity
- 53.A network technician is troubleshooting an IPv6 routing issue. Two directly connected routers, R1 and R2, are unable to establish an OSPFv3 adjacency. R1's interface is configured with 'ipv6 ospf 1 area 0'. R2's interface is configured with 'ipv6 ospf 1 area 1'. What is the most likely reason for the OSPFv3 adjacency failure?IP Connectivity
- 54.A network architect is designing a routing solution for a campus network that requires fast convergence and support for unequal-cost load balancing. The network consists entirely of Cisco devices. Which routing protocol would be the most suitable choice to meet these requirements?IP Connectivity
- 55.A network administrator is configuring BGP on a router and needs to define the local autonomous system number. Which BGP command initializes the BGP routing process on a Cisco router and specifies this AS number?IP Connectivity
- 56.A network technician needs to configure a default route on a Cisco router to forward all traffic for unknown destinations to the internet service provider (ISP). The ISP's router has an IP address of 203.0.113.1 on the directly connected link. Which command would correctly configure this default route?IP Connectivity
- 57.A network technician is configuring a router for a small office network. The office uses private IP addresses (192.168.1.0/24) internally and needs to access the internet. Which type of Network Address Translation (NAT) is most suitable if multiple internal hosts need to share a single public IP address for outbound connections?IP Connectivity
- 58.A network engineer is troubleshooting an IPv6 routing issue. A router is unable to reach a specific IPv6 network despite having a valid entry in its routing table. Upon inspection, it's noted that the entry shows the route as 'installed', but the 'next-hop' address is a link-local address (e.g., FE80::1) on an interface that is currently down. Which of the following is the most likely reason for the routing failure?IP Connectivity
- 59.A network technician is configuring a Cisco router to perform Port Address Translation (PAT) for internal users accessing the internet. Which of the following commands correctly defines the inside global interface for PAT?IP Connectivity
- 60.A network engineer is configuring a router to use OSPF (Open Shortest Path First) as its interior gateway protocol. The engineer wants to ensure that all interfaces participating in OSPF are included in Area 0. Which of the following OSPF commands, when configured under router OSPF 1, will enable OSPF on the interface with IP address 192.168.10.1/24 and assign it to Area 0?IP Connectivity
- 61.A network administrator is configuring EIGRP on a router and wants to ensure that specific interfaces participate in the EIGRP routing process, while other interfaces (e.g., connecting to the internet) do not send or receive EIGRP updates. Which EIGRP configuration feature should be used to achieve this?IP Connectivity
- 62.A network engineer is designing a routing solution for a network where fast convergence and support for unequal-cost load balancing are critical requirements. Which IP routing protocol is best suited for these requirements?IP Connectivity
- 63.A network administrator is reviewing the routing table of a Cisco router. They notice multiple routes to the same destination network, learned from different routing sources. The router uses a specific value to determine which route is the most preferred to install in the routing table. What is this value called?IP Connectivity
- 64.A network engineer is configuring OSPFv3 on a router for an IPv6 network. Two directly connected routers are failing to establish an OSPFv3 adjacency. Upon investigation, they discover that the OSPFv3 hello and dead timers are mismatched between the two routers. What is the consequence of mismatched OSPFv3 timers?IP Connectivity
- 65.A network technician is configuring route summarization for an OSPF network. The goal is to advertise a single summary route for the networks 172.16.1.0/24, 172.16.2.0/24, 172.16.3.0/24, and 172.16.4.0/24 from Area 1 into Area 0. What is the most optimal summary route that can be configured?IP Connectivity
- 66.A network technician observes that a router's routing table contains multiple paths to the same destination network learned via different routing protocols. For example, OSPF has a path with a cost of 20, and EIGRP has a path with a composite metric of 256000. Which path will the router choose to forward traffic, assuming default administrative distances?IP Connectivity
- 67.A network security team observes an attacker attempting to flood a web server with a massive volume of malformed HTTP requests, aiming to consume all available server resources and render the service unavailable to legitimate users. The attack originates from a single, identifiable source IP address. What type of attack is being described?Security Fundamentals
- 68.A security administrator is implementing a system to proactively monitor network traffic for suspicious patterns and known attack signatures. If such activity is detected, the system should automatically block the malicious traffic and alert the administrator without requiring manual intervention for each incident. Which network security technology best fits this description?Security Fundamentals
- 69.A cybersecurity analyst is investigating a recent data breach. Evidence suggests that an attacker gained access by exploiting a vulnerability in a web application's input fields, allowing them to execute arbitrary commands on the underlying database. The attacker specifically appended malicious code to a user input, which was then directly processed by the database server. Which type of attack occurred?Security Fundamentals
- 70.A company is implementing a new policy to restrict network access based on the roles and responsibilities of its employees. For example, the finance department should only be able to access financial servers, and HR should only access HR-related resources, even if they are on the same physical network segment. Which security principle is this policy primarily enforcing?Security Fundamentals
- 71.A company requires all its employees to use a combination of a password and a one-time code generated by a mobile application to access internal systems. This measure is implemented to ensure that even if a password is stolen, unauthorized access is still prevented. Which security concept is the company enforcing?Security Fundamentals
- 72.A network engineer is configuring a firewall for a new corporate network segment. The policy dictates that all outbound web traffic (HTTP and HTTPS) from internal users should be allowed, but all other outbound traffic, unless explicitly permitted, should be blocked by default. Which firewall rule concept is the engineer applying for the default blocking of unpermitted traffic?Security Fundamentals
- 73.A network technician is setting up a new wireless access point (WAP) for a small office. To enhance security, the technician decides to configure the WAP to only allow devices with specific hardware addresses to connect to the network. Which security feature is the technician implementing?Security Fundamentals
- 74.A network administrator is reviewing security logs and notices a large number of connection attempts to various internal servers from an external IP address, all targeting common service ports like 21, 23, 80, and 443. These attempts are not resulting in successful logins but are occurring in a systematic, automated fashion across a wide range of IP addresses within the network. What type of attack is most likely being attempted?Security Fundamentals
- 75.A network administrator is troubleshooting an application that relies heavily on accurate time synchronization across multiple servers. They suspect that one of the servers is not correctly synchronizing its clock. Which UDP port is commonly used by NTP for time synchronization?IP Services
- 76.A network technician is configuring a new switch and needs to ensure that all network devices receive their IP addresses automatically from a central server. Which IP service is essential for this functionality?IP Services
- 77.A network engineer needs to monitor the CPU utilization, memory usage, and interface statistics of multiple routers and switches from a central network management station. Which protocol is best suited for collecting this type of operational data?IP Services
- 78.A network engineer is configuring a new DNS server for a small office. They want to ensure that when users type 'www.example.com', their internal server at 192.168.1.10 is resolved. Which type of DNS record is primarily used for mapping hostnames to IPv4 addresses?IP Services
- 79.A network engineer is troubleshooting a slow internet connection for a specific application. Upon investigation, they find that other applications on the same network are performing normally. Which IP service could be configured to prioritize traffic for the critical application over less important traffic?IP Services
- 80.A user reports slow network performance and frequent disconnections on their laptop when connected to the office Wi-Fi. Other wired devices on the network are performing normally. The office uses multiple wireless access points (APs) across different channels. What is the most likely cause of the user's issue?Networking Fundamentals
- 81.A network monitoring system is configured to send SNMP traps to a network administrator's workstation whenever a critical event occurs on a managed device. Which UDP port must the administrator's workstation be listening on to receive these traps?IP Services
- 82.A company is considering migrating some of its on-premise servers and applications to a cloud provider. They want to maintain full control over the operating system, applications, and data, but offload the management of the underlying hardware, virtualization, and networking infrastructure. Which cloud service model best fits these requirements?Networking Fundamentals
- 83.A network administrator is configuring a Syslog server to collect log messages from multiple network devices. Which severity level indicates that a system is unusable and requires immediate attention, typically resulting in a system crash?IP Services
- 84.A network engineer is troubleshooting a DNS resolution issue. Users can ping internal servers by their IP addresses but cannot access them by their fully qualified domain names (FQDNs). Which DNS record type is primarily responsible for mapping a hostname to an IPv4 address?IP Services
- 85.A network engineer is configuring a network device that needs to prioritize certain types of traffic, such as Voice over IP (VoIP) and video conferencing, over less time-sensitive traffic like email and file transfers. Which networking concept is being applied here to ensure critical applications receive adequate bandwidth and low latency?Networking Fundamentals
- 86.A network technician is setting up a new virtualized environment on a single physical server. They need to configure multiple virtual machines (VMs) to communicate with each other and also with the external physical network using a single physical network interface card (NIC) on the host. Which networking component allows the VMs to share the physical NIC and communicate as if they were on a physical network segment?Networking Fundamentals
- 87.A small business is setting up a new wireless network and wants to use the latest Wi-Fi standard that operates in both 2.4 GHz and 5 GHz bands, supports MIMO (Multiple-Input, Multiple-Output) for better performance, and offers theoretical speeds up to 600 Mbps. Which Wi-Fi standard should they choose?Networking Fundamentals
- 88.A network technician is configuring redundant connections between two core switches in a data center. If multiple active paths are allowed to exist simultaneously between switches, it can lead to broadcast storms, MAC address table instability, and multiple frame copies. Which protocol is designed to prevent these issues by logically blocking redundant paths while still allowing for physical redundancy?Networking Fundamentals
- 89.A network security team needs to centralize logging from all network devices (routers, switches, firewalls) to a dedicated server for security analysis and auditing. Which IP service is used for this purpose?IP Services
- 90.A network technician is troubleshooting a client's workstation that is unable to access local network resources, but can ping its own loopback address. The technician observes that the workstation has an IP address of 169.254.100.50 and a subnet mask of 255.255.0.0. What is the most likely cause of this issue?Networking Fundamentals
- 91.A network technician is troubleshooting an intermittent network connectivity issue where some devices periodically lose their IP addresses. Upon investigation, they discover that the DHCP server is configured with a very short lease time (e.g., 5 minutes) for a large subnet with many clients, leading to excessive DHCP renewal traffic. Which of the following is a direct consequence of an overly short DHCP lease time in a busy network?IP Services
- 92.A network security analyst is investigating unusual outbound network traffic originating from several internal servers. The traffic appears to be communicating with unknown external IP addresses on a variety of high-numbered ports. The analyst suspects a compromised server is attempting to establish command and control (C2) communications. Which network component would be most effective for inspecting and controlling this outbound traffic based on defined security policies?Networking Fundamentals
- 93.A network engineer is configuring a new corporate network and needs to ensure that all devices can communicate directly with each other without the need for a central connecting device. This design also needs to be highly resilient to individual link failures. Which network topology best fits these requirements?Networking Fundamentals
- 94.A small business has a single internet connection and wants to share it among multiple employees, each with their own computer. They also want to use a shared printer and file server within the office. What type of network topology is most commonly and economically implemented in this scenario?Networking Fundamentals
- 95.A network administrator is configuring a new router for a large enterprise network. The router needs to connect multiple departments, each with its own subnet, and handle traffic between them efficiently. Which component allows the router to logically separate broadcast domains and forward packets between different IP networks?Networking Fundamentals
- 96.A network administrator is designing a new network segment where devices must consistently receive the same IP address every time they connect, despite using DHCP for initial configuration. This is crucial for internal services that rely on stable IP addresses for access control. Which DHCP feature should the administrator implement to achieve this persistent IP address assignment for specific devices?IP Services
- 97.A network administrator needs to ensure that voice over IP (VoIP) traffic receives preferential treatment over other data traffic on a congested link. Which QoS mechanism is used to prioritize specific types of traffic by placing it into different queues based on its classification?IP Services
- 98.A network engineer is designing a network for a new branch office. The office requires high availability and needs to minimize downtime in case of a single point of failure in the network infrastructure. Which network topology would best address this requirement by providing multiple paths between devices?Networking Fundamentals
- 99.A web server administrator notices that the server's logs show requests coming from various IP addresses, but the DNS resolver logs on the server are empty. However, users report no issues accessing the website by its domain name. What is the most probable reason for the empty DNS resolver logs?IP Services
- 100.A network technician is setting up a small office network and needs to connect several devices, including computers and printers, to the network. Which network component is primarily responsible for forwarding data frames between these devices within the same local area network?Networking Fundamentals