TechNuggets Academy

Network Access

Free Cisco Certified Network Associate (CCNA) practice — 6 questions on Network Access, with explanations. No sign-up. Full 12-question mixed test →

Question 1 of 6 · Network Access
Two switches, SW1 and SW2, are connected via a single trunk link running 802.1Q. SW1's trunk interface is configured with the native VLAN set to 1 (default), while SW2's trunk interface has been configured with native VLAN 99. Console logs on both switches show recurring CDP native VLAN mismatch warnings, and untagged traffic destined for VLAN 1 is unexpectedly appearing in VLAN 99 on SW2. What must be done to correctly resolve this issue?
A native VLAN mismatch occurs when the two ends of an 802.1Q trunk disagree on which VLAN is untagged. This causes CDP/LLDP warnings and can leak traffic between VLANs. The fix is to make both sides agree on the same native VLAN, in this case setting SW2 back to native VLAN 1 to match SW1.
Question 2 of 6 · Network Access
You are bundling four physical links between SW1 and SW2 into a single logical interface. On SW1, all four interfaces are configured with 'channel-group 1 mode active'. Which configuration on SW2's corresponding four interfaces will successfully form the EtherChannel using LACP?
LACP requires at least one side to be in active mode to initiate negotiation. Active-active and active-passive combinations both successfully negotiate and form the EtherChannel, since one side actively sends LACP packets and the other side (passive) responds.
Question 3 of 6 · Network Access
Three switches participate in Rapid PVST+ for VLAN 10: SW1 has bridge priority 32768, SW2 has bridge priority 24576, and SW3 has bridge priority 32768 with a lower MAC address than SW1. Which switch becomes the root bridge for VLAN 10?
The root bridge is elected based on the lowest bridge ID, which is priority first, then MAC address only used as a tiebreaker when priorities are equal. SW2's priority of 24576 is lower than SW1 and SW3's 32768, so SW2 wins outright regardless of MAC address comparisons.
Question 4 of 6 · Network Access
An access switchport connects to a user's PC. The PC is frequently powered on and off, and each time this happens the switch generates a topology change notification (TCN) that triggers unnecessary STP recalculation across the network. The administrator also wants to guarantee that if someone accidentally connects a switch to this port instead of a PC, the port is automatically disabled. Which configuration should be applied to this port?
PortFast causes the port to skip the listening and learning STP states and go straight to forwarding on link up, and it also prevents the port from generating TCNs on normal link up/down events for end-host connections. BPDU Guard adds protection by immediately error-disabling the port if a BPDU is ever received, which happens if a switch is plugged in by mistake. Both together satisfy both requirements in the scenario.
Question 5 of 6 · Network Access
A network engineer is comparing Layer 2 discovery protocols supported on Cisco switches for a mixed-vendor environment that includes some non-Cisco devices. Which statement correctly describes the two protocols?
LLDP (Link Layer Discovery Protocol) is defined by the IEEE 802.1AB standard and is supported across multiple vendors, making it useful in mixed environments. CDP (Cisco Discovery Protocol) is Cisco-proprietary and, in general, only Cisco devices participate in it, though CDP is still enabled by default on most Cisco platforms.
Question 6 of 6 · Network Access
An administrator needs to log into a Cisco Wireless LAN Controller's HTTPS-based web GUI from a laptop located on a management subnet that is different from the subnets used by the lightweight access points and wireless clients. Which WLC interface handles this type of administrative access, such as SSH, HTTPS, and SNMP traffic to the controller itself?
The management interface on a WLC is the primary interface used for in-band management access to the controller, including SSH, Telnet, SNMP, and the HTTPS web GUI, regardless of which subnet the administrator's device is on, as long as IP routing/reachability exists to that interface's IP.
Ready for the real thing?

The full course has two full-length practice tests, video lessons for every exam domain, hands-on labs and detailed answer explanations.

Start my full course on Udemy →