VMware ESXi and vSphere Cluster Management
CCNA Fundamentals Quiz: Cisco Networking Knowledge Check
Test foundational CCNA knowledge with an untimed quiz covering ICMP, IPv4, routing, switching, Cisco IOS, ACLs, memory, and network devices.
This introductory CCNA fundamentals quiz is a self-assessment for aspiring CCNA candidates, networking students, and entry-level network administrators. It reviews core Cisco networking concepts, including IPv4, ICMP, routing, switching, Cisco IOS commands, access control lists, device memory, and the OSI model.
The quiz is untimed. Select one answer for each question, then compare your responses with the answer key. A score of 80 percent or higher indicates a passing result for this knowledge check. Passing demonstrates a useful foundation, but it does not replace continued CCNA study and hands-on practice.
How to Use This Quiz
- Answer every question without using notes if you want a realistic self-assessment.
- Record one answer for each question.
- Check the answer key only after completing the quiz.
- Review the explanation for every missed question.
- Continue with broader CCNA study, including subnetting, VLANs, routing protocols, ACLs, and troubleshooting.
CCNA Fundamentals Quiz
Questions
Which protocol does the
pingutility normally use to test IP reachability?- A. TCP
- B. UDP
- C. ICMP
- D. ARP
How many bits are in an IPv4 address?
- A. 16 bits
- B. 32 bits
- C. 64 bits
- D. 128 bits
What does dotted-decimal notation represent in an IPv4 address such as 192.0.2.10?
- A. Four 8-bit octets representing 32 bits
- B. Eight 4-bit fields representing 32 bits
- C. Four 32-bit fields representing 128 bits
- D. Two 16-bit fields representing 32 bits
Which address does a router primarily examine when selecting a Layer 3 forwarding path?
- A. Source MAC address
- B. Destination MAC address only
- C. Source IP address
- D. Destination IP address
Which statement correctly describes BGP?
- A. It is a Layer 2 switching protocol.
- B. It is the major broadly deployed exterior gateway routing protocol.
- C. It is an application-layer file transfer protocol.
- D. It is a replacement for ARP.
Which group contains interior gateway protocols?
- A. OSPF, RIP, and EIGRP
- B. BGP, HTTP, and DNS
- C. ARP, ICMP, and TCP
- D. Ethernet, Wi-Fi, and VLAN
What is the default Cisco administrative distance for RIP?
- A. 1
- B. 90
- C. 110
- D. 120
When a Cisco router learns multiple routes to the same destination from different sources, what does administrative distance help determine?
- A. The trusted route source
- B. The destination host's MAC address
- C. The VLAN number
- D. The transport-layer port
How is an IP address normally assigned to a Layer 2 switch for remote management?
- A. By assigning it to a switch virtual interface
- B. By assigning it to every physical access port
- C. By placing it in the ROM monitor
- D. By changing the switch's burned-in MAC address
Which configuration sequence assigns an IPv4 address to the conventional default management SVI?
configure terminal interface vlan 1 ip address 192.0.2.2 255.255.255.0 no shutdown- A. It configures a routed physical port.
- B. It configures VLAN 1's switch virtual interface.
- C. It changes the startup configuration in NVRAM only.
- D. It assigns an address to the console line.
What does a switch normally do when the destination MAC address is not in its MAC address table?
- A. Discard the frame immediately
- B. Send it only out the ingress port
- C. Flood it out eligible ports except the ingress port
- D. Route it using the destination IP address
How does a switch reduce unknown-unicast flooding over time?
- A. It learns source MAC addresses and associates them with ports.
- B. It replaces every MAC address with an IP address.
- C. It sends all frames to the router first.
- D. It disables MAC address learning.
What does a standard IPv4 ACL primarily match?
- A. Source IPv4 address
- B. Destination IPv4 address and TCP port
- C. Source and destination MAC addresses
- D. VLAN name and interface speed
What is the purpose of the first 24 bits of a conventional 48-bit MAC address?
- A. They identify the transport protocol.
- B. They identify the registered organization or vendor through the OUI.
- C. They identify the IPv4 subnet mask.
- D. They identify the switch port.
Which Cisco IOS command sets the credential used to enter privileged EXEC mode?
- A.
enable secret - B.
ip address - C.
show flash: - D.
access-class
- A.
Which is the expanded form of
sh ip int b?- A.
show interfaces brief - B.
show ip interface brief - C.
show ipv6 interface broadcast - D.
show ip internal buffer
- A.
At which OSI layer does a basic hub operate?
- A. Physical layer
- B. Data Link layer
- C. Network layer
- D. Transport layer
Where is a Cisco IOS image normally stored?
- A. Flash memory
- B. NVRAM only
- C. RAM only
- D. The MAC address table
Which statement about UDP is correct?
- A. It is a connectionless Transport layer protocol.
- B. It is a routing protocol used between autonomous systems.
- C. It is a Physical-layer signaling standard.
- D. It always establishes a reliable connection before sending data.
Which command displays learned MAC addresses and their associated switch ports?
- A.
show ip route - B.
show mac address-table - C.
show flash: - D.
show ip interface brief
- A.
Answer Key and Explanations
- C — ICMP. Ping sends ICMP echo messages and evaluates the replies. ICMP is used for diagnostics and error reporting; TCP and UDP are transport protocols, while ARP maps IPv4 addresses to local MAC addresses.
- B — 32 bits. IPv4 has 32 bits divided into four 8-bit octets. IPv6 uses 128-bit addresses.
- A — Four 8-bit octets representing 32 bits. Each dotted-decimal value represents one octet.
- D — Destination IP address. A router uses the destination Layer 3 address and its routing table to select a path. MAC forwarding is a separate Layer 2 operation. VLAN identifiers describe switched-network segmentation and are not the basic field used for an IP routing lookup.
- B — BGP. BGP, or Border Gateway Protocol, is the major interdomain routing protocol. EGP describes the category of protocols used between autonomous systems; IGP describes protocols used within one autonomous system.
- A — OSPF, RIP, and EIGRP. These are interior routing protocols. BGP is exterior, while HTTP, DNS, ARP, and ICMP serve different purposes.
- D — 120. Cisco's default administrative distance for RIP is 120. Lower administrative-distance values are preferred over higher values when comparing route sources.
- A — The trusted route source. Administrative distance is a Cisco route-source trust value. It is different from the metric used within a routing protocol.
- A — By assigning it to a switch virtual interface. An SVI is a logical VLAN interface that can provide management access to a Layer 2 switch.
- B — It configures VLAN 1's switch virtual interface. VLAN 1 is a common default management SVI convention, although a production design may use a different management VLAN. A Layer 2 switch's physical access ports are not normally configured as routed interfaces.
- C — Flood it out eligible ports except the ingress port. This is unknown-unicast flooding. A broadcast is also sent out eligible ports except the ingress port, while a known unicast is sent only through the port associated with its destination MAC.
- A — It learns source MAC addresses and associates them with ports. MAC learning builds the MAC address table as frames arrive, allowing later known-unicast frames to be forwarded more selectively.
- A — Source IPv4 address. A standard ACL evaluates the source address. Extended ACLs can evaluate source and destination addresses, protocols, and transport ports, so they provide more precise filtering.
- B — They identify the registered organization or vendor through the OUI. An OUI is the first 24 bits of a 48-bit MAC address. The remaining 24 bits identify the interface or device portion assigned by the organization.
- A —
enable secret. The command sets the privileged EXEC credential. It does not automatically encrypt every password displayed in the configuration; password protection should also include appropriate line security and, where required, password encryption features. - B —
show ip interface brief. IOS accepts abbreviations when the shortened form is unambiguous. This command provides a concise view of interface IP addresses and operational or administrative status. - A — Physical layer. A hub repeats electrical or other physical signals and does not make MAC-based forwarding decisions. A switch primarily operates at Layer 2, while a router makes Layer 3 forwarding decisions.
- A — Flash memory. Flash is nonvolatile storage normally used for IOS image files. NVRAM commonly stores the startup configuration, RAM holds the running configuration and active processes, and ROM contains bootstrap or low-level startup code.
- A — It is a connectionless Transport layer protocol. UDP does not establish a connection or provide TCP's built-in reliability mechanisms. ICMP operates with IP support rather than as a transport protocol.
- B —
show mac address-table. This command displays learned MAC addresses and the switch ports associated with them.
Quiz Question Blueprint
| Question number | Networking domain | Concept assessed | Correct concept | Common distractor misconception |
|---|---|---|---|---|
| 1 | Connectivity | Ping and ICMP | Ping uses ICMP | Ping uses TCP or UDP |
| 2–3 | IPv4 | Address size and notation | 32 bits; four 8-bit octets | IPv4 is 128 bits |
| 4 | Routing | Router forwarding | Destination IP drives Layer 3 lookup | VLAN ID or source address drives the lookup |
| 5–6 | Routing protocols | EGP and IGP roles | BGP is exterior; OSPF, RIP, and EIGRP are interior | All routing protocols have the same scope |
| 7–8 | Route selection | RIP administrative distance | RIP defaults to 120; lower is preferred | Higher administrative distance is preferred |
| 9–10 | Switch management | SVIs and VLAN 1 | Management IP belongs on an SVI | A Layer 2 switch must use a routed physical port |
| 11–12 | Switching | Unknown unicast and MAC learning | Flood except ingress; learn source MACs | Unknown unicast is routed or sent only to the router |
| 13 | Security | Standard ACL matching | Source IPv4 address | Standard ACLs match TCP ports |
| 14 | Ethernet | MAC address and OUI | First 24 bits identify the organization | OUI is an IP or VLAN identifier |
| 15–16 | IOS operations | Privilege security and abbreviations | enable secret and show ip interface brief | Secret encrypts every password; any abbreviation is valid |
| 17 | OSI model | Hub operation | Hub operates at Layer 1 | Hub performs Layer 3 routing |
| 18 | IOS storage | Flash and other memory types | Flash stores IOS images | NVRAM stores the IOS image |
| 19 | Transport | UDP | Connectionless Layer 4 protocol | UDP is an application or routing protocol |
| 20 | Switch operations | MAC table inspection | show mac address-table | Routing-table commands show learned MACs |
Protocol and Layer Comparison
| Protocol or technology | Primary purpose | OSI layer or scope | Key distinction |
|---|---|---|---|
| ICMP | Diagnostics and error reporting | Network-layer support for IP | Ping uses ICMP; it is not TCP or UDP. |
| TCP | Reliable, connection-oriented transport | Transport layer | Uses sequencing, acknowledgments, and retransmission. |
| UDP | Connectionless datagram transport | Transport layer | Has lower protocol overhead and no built-in delivery guarantee. |
| ARP | Find a local MAC address for an IPv4 address | Local IPv4 and Data Link interaction | It is not the protocol used by ping itself. |
| BGP | Exchange routes between autonomous systems | Exterior gateway scope | It is the major broadly deployed interdomain routing protocol. |
| OSPF | Interior link-state routing | IGP scope | Used within an autonomous system. |
| RIP | Interior distance-vector routing | IGP scope | Its default Cisco administrative distance is 120. |
| EIGRP | Interior routing | IGP scope | It is a routing protocol, not a switching or transport technology. |
Cisco Memory Types
| Memory type | Volatility | Typical contents | CCNA relevance |
|---|---|---|---|
| Flash | Nonvolatile | Cisco IOS image files | Check it with show flash: when verifying software images. |
| NVRAM | Nonvolatile | Startup configuration | Preserves the saved configuration across reloads. |
| RAM | Volatile | Running configuration, routing processes, and operational data | Contents are lost when the device loses power. |
| ROM | Nonvolatile | Bootstrap code, POST, and low-level recovery functions | Helps the device start and locate an IOS image. |
Network Device OSI Layer Roles
| Device | Primary OSI layer | Core behavior |
|---|---|---|
| Hub | Layer 1, Physical | Repeats physical signals out other ports without examining MAC addresses. |
| Switch | Primarily Layer 2, Data Link | Learns source MAC addresses and forwards frames using its MAC address table. |
| Router | Layer 3, Network | Examines destination IP addresses and selects a next hop from its routing table. |
Standard and Extended ACL Comparison
| ACL type | Primary matching fields | Typical placement guidance | Example use case |
|---|---|---|---|
| Standard IPv4 ACL | Source IPv4 address | Typically placed close to the destination because it cannot distinguish destination networks or transport ports. | Permit or deny all traffic from a particular source address or subnet. |
| Extended IPv4 ACL | Source and destination IPv4 addresses, protocol, and transport ports | Typically placed close to the source to stop unwanted traffic early. | Permit HTTPS from one subnet to a specific server while denying other traffic. |
Useful Cisco IOS Commands and Configurations
Test IP Reachability
ping <destination-ip-or-hostname>
Ping tests IP reachability with ICMP messages. A failed ping does not by itself prove that every path component is down: ICMP may be filtered, the target may be configured not to respond, or a routing or Layer 2 problem may exist.
Review Interface Status
show ip interface brief
sh ip int b
The second form is an abbreviation. IOS accepts shortened commands only when the abbreviation remains unambiguous. The output summarizes interface IP addresses and status values such as administrative and operational state.
Configure a Management SVI
configure terminal
interface vlan 1
ip address <management-ip> <subnet-mask>
no shutdown
This assigns an IPv4 management address to the VLAN 1 SVI. Remote management also requires an active management VLAN path and, when managing from another subnet, an appropriate default gateway on the Layer 2 switch.
Protect Privileged EXEC Access
configure terminal
enable secret <password-or-secret>
enable secret protects the transition from user EXEC mode to privileged EXEC mode. It is different from a feature that encrypts visible line passwords. Use strong, unique credentials and secure console, VTY, and management access as part of a broader hardening plan.
Inspect ACL, Routing, Switching, and Flash Information
access-list 10 permit <source-ip> <wildcard-mask>
show mac address-table
show ip route
show flash:
The numbered ACL example is a standard ACL because it evaluates a source IPv4 address. The other commands inspect learned MAC entries, routing information, and IOS image storage.
Troubleshooting Practice
Ping to a Target Fails
- Confirm the destination IP address and check local interface status with
show ip interface brief. - Use
pingand remember that its test uses ICMP. - Run
show ip routeto verify that the device has a path based on the destination IP address. - Check Layer 2 connectivity, VLAN membership, and the target's availability where applicable.
Expected Switched Traffic Does Not Reach a Newly Connected Endpoint
- Run
show mac address-table. - Determine whether the destination MAC is known.
- If it is unknown, explain that the switch floods the unicast frame through eligible ports except the ingress port.
- Allow traffic from the endpoint and verify that the switch learns its source MAC address.
A Layer 2 Switch Cannot Be Managed Remotely
- Verify that the management SVI has the intended IPv4 address.
- Check that the SVI is not administratively shut down.
- Verify that the management VLAN exists and has an active Layer 2 path.
- Confirm the subnet mask and configure the appropriate default gateway when the management station is on another subnet.
The Device Boots Without the Expected IOS Software
- Use
show flash:to look for a valid IOS image. - Distinguish flash image storage from NVRAM startup-configuration storage, RAM running-state storage, and ROM bootstrap functions.
- If an image exists but is not selected, inspect boot settings and the device's startup process.
Exam-Relevant Notes
- ICMP is not a transport protocol. Ping uses ICMP; TCP and UDP operate at the Transport layer.
- IPv4 is 32 bits. Four octets of 8 bits each produce dotted-decimal notation. IPv6 uses 128 bits.
- Routing and switching use different addresses. Routers select paths using destination IP information; switches forward Ethernet frames using destination MAC information.
- Lower administrative distance wins. RIP's Cisco default is 120.
- Standard ACLs are source-based. Use extended ACLs when destination, protocol, or port matching is required.
- Flash and NVRAM have different jobs. Flash normally stores IOS images; NVRAM normally stores the startup configuration.
- Unknown unicast is not the same as broadcast. Both may be flooded, but an unknown unicast has a unicast destination MAC that the switch has not learned, while a broadcast uses the broadcast destination.
- IOS abbreviations must be unambiguous.
sh ip int bexpands toshow ip interface brief.
After reviewing your result, continue with the wider CCNA curriculum and use labs to reinforce the concepts. You can return to this CCNA fundamentals quiz after studying to measure improvement.