VMware ESXi and vSphere Cluster Management

CCNA Fundamentals Quiz: Cisco Networking Knowledge Check

Test foundational CCNA knowledge with an untimed quiz covering ICMP, IPv4, routing, switching, Cisco IOS, ACLs, memory, and network devices.

This introductory CCNA fundamentals quiz is a self-assessment for aspiring CCNA candidates, networking students, and entry-level network administrators. It reviews core Cisco networking concepts, including IPv4, ICMP, routing, switching, Cisco IOS commands, access control lists, device memory, and the OSI model.

The quiz is untimed. Select one answer for each question, then compare your responses with the answer key. A score of 80 percent or higher indicates a passing result for this knowledge check. Passing demonstrates a useful foundation, but it does not replace continued CCNA study and hands-on practice.

How to Use This Quiz

  1. Answer every question without using notes if you want a realistic self-assessment.
  2. Record one answer for each question.
  3. Check the answer key only after completing the quiz.
  4. Review the explanation for every missed question.
  5. Continue with broader CCNA study, including subnetting, VLANs, routing protocols, ACLs, and troubleshooting.

CCNA Fundamentals Quiz

Questions

  1. Which protocol does the ping utility normally use to test IP reachability?

    • A. TCP
    • B. UDP
    • C. ICMP
    • D. ARP
  2. How many bits are in an IPv4 address?

    • A. 16 bits
    • B. 32 bits
    • C. 64 bits
    • D. 128 bits
  3. What does dotted-decimal notation represent in an IPv4 address such as 192.0.2.10?

    • A. Four 8-bit octets representing 32 bits
    • B. Eight 4-bit fields representing 32 bits
    • C. Four 32-bit fields representing 128 bits
    • D. Two 16-bit fields representing 32 bits
  4. Which address does a router primarily examine when selecting a Layer 3 forwarding path?

    • A. Source MAC address
    • B. Destination MAC address only
    • C. Source IP address
    • D. Destination IP address
  5. Which statement correctly describes BGP?

    • A. It is a Layer 2 switching protocol.
    • B. It is the major broadly deployed exterior gateway routing protocol.
    • C. It is an application-layer file transfer protocol.
    • D. It is a replacement for ARP.
  6. Which group contains interior gateway protocols?

    • A. OSPF, RIP, and EIGRP
    • B. BGP, HTTP, and DNS
    • C. ARP, ICMP, and TCP
    • D. Ethernet, Wi-Fi, and VLAN
  7. What is the default Cisco administrative distance for RIP?

    • A. 1
    • B. 90
    • C. 110
    • D. 120
  8. When a Cisco router learns multiple routes to the same destination from different sources, what does administrative distance help determine?

    • A. The trusted route source
    • B. The destination host's MAC address
    • C. The VLAN number
    • D. The transport-layer port
  9. How is an IP address normally assigned to a Layer 2 switch for remote management?

    • A. By assigning it to a switch virtual interface
    • B. By assigning it to every physical access port
    • C. By placing it in the ROM monitor
    • D. By changing the switch's burned-in MAC address
  10. Which configuration sequence assigns an IPv4 address to the conventional default management SVI?

    configure terminal
    interface vlan 1
    ip address 192.0.2.2 255.255.255.0
    no shutdown
    • A. It configures a routed physical port.
    • B. It configures VLAN 1's switch virtual interface.
    • C. It changes the startup configuration in NVRAM only.
    • D. It assigns an address to the console line.
  11. What does a switch normally do when the destination MAC address is not in its MAC address table?

    • A. Discard the frame immediately
    • B. Send it only out the ingress port
    • C. Flood it out eligible ports except the ingress port
    • D. Route it using the destination IP address
  12. How does a switch reduce unknown-unicast flooding over time?

    • A. It learns source MAC addresses and associates them with ports.
    • B. It replaces every MAC address with an IP address.
    • C. It sends all frames to the router first.
    • D. It disables MAC address learning.
  13. What does a standard IPv4 ACL primarily match?

    • A. Source IPv4 address
    • B. Destination IPv4 address and TCP port
    • C. Source and destination MAC addresses
    • D. VLAN name and interface speed
  14. What is the purpose of the first 24 bits of a conventional 48-bit MAC address?

    • A. They identify the transport protocol.
    • B. They identify the registered organization or vendor through the OUI.
    • C. They identify the IPv4 subnet mask.
    • D. They identify the switch port.
  15. Which Cisco IOS command sets the credential used to enter privileged EXEC mode?

    • A. enable secret
    • B. ip address
    • C. show flash:
    • D. access-class
  16. Which is the expanded form of sh ip int b?

    • A. show interfaces brief
    • B. show ip interface brief
    • C. show ipv6 interface broadcast
    • D. show ip internal buffer
  17. At which OSI layer does a basic hub operate?

    • A. Physical layer
    • B. Data Link layer
    • C. Network layer
    • D. Transport layer
  18. Where is a Cisco IOS image normally stored?

    • A. Flash memory
    • B. NVRAM only
    • C. RAM only
    • D. The MAC address table
  19. Which statement about UDP is correct?

    • A. It is a connectionless Transport layer protocol.
    • B. It is a routing protocol used between autonomous systems.
    • C. It is a Physical-layer signaling standard.
    • D. It always establishes a reliable connection before sending data.
  20. Which command displays learned MAC addresses and their associated switch ports?

    • A. show ip route
    • B. show mac address-table
    • C. show flash:
    • D. show ip interface brief

Answer Key and Explanations

  1. C — ICMP. Ping sends ICMP echo messages and evaluates the replies. ICMP is used for diagnostics and error reporting; TCP and UDP are transport protocols, while ARP maps IPv4 addresses to local MAC addresses.
  2. B — 32 bits. IPv4 has 32 bits divided into four 8-bit octets. IPv6 uses 128-bit addresses.
  3. A — Four 8-bit octets representing 32 bits. Each dotted-decimal value represents one octet.
  4. D — Destination IP address. A router uses the destination Layer 3 address and its routing table to select a path. MAC forwarding is a separate Layer 2 operation. VLAN identifiers describe switched-network segmentation and are not the basic field used for an IP routing lookup.
  5. B — BGP. BGP, or Border Gateway Protocol, is the major interdomain routing protocol. EGP describes the category of protocols used between autonomous systems; IGP describes protocols used within one autonomous system.
  6. A — OSPF, RIP, and EIGRP. These are interior routing protocols. BGP is exterior, while HTTP, DNS, ARP, and ICMP serve different purposes.
  7. D — 120. Cisco's default administrative distance for RIP is 120. Lower administrative-distance values are preferred over higher values when comparing route sources.
  8. A — The trusted route source. Administrative distance is a Cisco route-source trust value. It is different from the metric used within a routing protocol.
  9. A — By assigning it to a switch virtual interface. An SVI is a logical VLAN interface that can provide management access to a Layer 2 switch.
  10. B — It configures VLAN 1's switch virtual interface. VLAN 1 is a common default management SVI convention, although a production design may use a different management VLAN. A Layer 2 switch's physical access ports are not normally configured as routed interfaces.
  11. C — Flood it out eligible ports except the ingress port. This is unknown-unicast flooding. A broadcast is also sent out eligible ports except the ingress port, while a known unicast is sent only through the port associated with its destination MAC.
  12. A — It learns source MAC addresses and associates them with ports. MAC learning builds the MAC address table as frames arrive, allowing later known-unicast frames to be forwarded more selectively.
  13. A — Source IPv4 address. A standard ACL evaluates the source address. Extended ACLs can evaluate source and destination addresses, protocols, and transport ports, so they provide more precise filtering.
  14. B — They identify the registered organization or vendor through the OUI. An OUI is the first 24 bits of a 48-bit MAC address. The remaining 24 bits identify the interface or device portion assigned by the organization.
  15. A — enable secret. The command sets the privileged EXEC credential. It does not automatically encrypt every password displayed in the configuration; password protection should also include appropriate line security and, where required, password encryption features.
  16. B — show ip interface brief. IOS accepts abbreviations when the shortened form is unambiguous. This command provides a concise view of interface IP addresses and operational or administrative status.
  17. A — Physical layer. A hub repeats electrical or other physical signals and does not make MAC-based forwarding decisions. A switch primarily operates at Layer 2, while a router makes Layer 3 forwarding decisions.
  18. A — Flash memory. Flash is nonvolatile storage normally used for IOS image files. NVRAM commonly stores the startup configuration, RAM holds the running configuration and active processes, and ROM contains bootstrap or low-level startup code.
  19. A — It is a connectionless Transport layer protocol. UDP does not establish a connection or provide TCP's built-in reliability mechanisms. ICMP operates with IP support rather than as a transport protocol.
  20. B — show mac address-table. This command displays learned MAC addresses and the switch ports associated with them.

Quiz Question Blueprint

Question numberNetworking domainConcept assessedCorrect conceptCommon distractor misconception
1ConnectivityPing and ICMPPing uses ICMPPing uses TCP or UDP
2–3IPv4Address size and notation32 bits; four 8-bit octetsIPv4 is 128 bits
4RoutingRouter forwardingDestination IP drives Layer 3 lookupVLAN ID or source address drives the lookup
5–6Routing protocolsEGP and IGP rolesBGP is exterior; OSPF, RIP, and EIGRP are interiorAll routing protocols have the same scope
7–8Route selectionRIP administrative distanceRIP defaults to 120; lower is preferredHigher administrative distance is preferred
9–10Switch managementSVIs and VLAN 1Management IP belongs on an SVIA Layer 2 switch must use a routed physical port
11–12SwitchingUnknown unicast and MAC learningFlood except ingress; learn source MACsUnknown unicast is routed or sent only to the router
13SecurityStandard ACL matchingSource IPv4 addressStandard ACLs match TCP ports
14EthernetMAC address and OUIFirst 24 bits identify the organizationOUI is an IP or VLAN identifier
15–16IOS operationsPrivilege security and abbreviationsenable secret and show ip interface briefSecret encrypts every password; any abbreviation is valid
17OSI modelHub operationHub operates at Layer 1Hub performs Layer 3 routing
18IOS storageFlash and other memory typesFlash stores IOS imagesNVRAM stores the IOS image
19TransportUDPConnectionless Layer 4 protocolUDP is an application or routing protocol
20Switch operationsMAC table inspectionshow mac address-tableRouting-table commands show learned MACs

Protocol and Layer Comparison

Protocol or technologyPrimary purposeOSI layer or scopeKey distinction
ICMPDiagnostics and error reportingNetwork-layer support for IPPing uses ICMP; it is not TCP or UDP.
TCPReliable, connection-oriented transportTransport layerUses sequencing, acknowledgments, and retransmission.
UDPConnectionless datagram transportTransport layerHas lower protocol overhead and no built-in delivery guarantee.
ARPFind a local MAC address for an IPv4 addressLocal IPv4 and Data Link interactionIt is not the protocol used by ping itself.
BGPExchange routes between autonomous systemsExterior gateway scopeIt is the major broadly deployed interdomain routing protocol.
OSPFInterior link-state routingIGP scopeUsed within an autonomous system.
RIPInterior distance-vector routingIGP scopeIts default Cisco administrative distance is 120.
EIGRPInterior routingIGP scopeIt is a routing protocol, not a switching or transport technology.

Cisco Memory Types

Memory typeVolatilityTypical contentsCCNA relevance
FlashNonvolatileCisco IOS image filesCheck it with show flash: when verifying software images.
NVRAMNonvolatileStartup configurationPreserves the saved configuration across reloads.
RAMVolatileRunning configuration, routing processes, and operational dataContents are lost when the device loses power.
ROMNonvolatileBootstrap code, POST, and low-level recovery functionsHelps the device start and locate an IOS image.

Network Device OSI Layer Roles

DevicePrimary OSI layerCore behavior
HubLayer 1, PhysicalRepeats physical signals out other ports without examining MAC addresses.
SwitchPrimarily Layer 2, Data LinkLearns source MAC addresses and forwards frames using its MAC address table.
RouterLayer 3, NetworkExamines destination IP addresses and selects a next hop from its routing table.

Standard and Extended ACL Comparison

ACL typePrimary matching fieldsTypical placement guidanceExample use case
Standard IPv4 ACLSource IPv4 addressTypically placed close to the destination because it cannot distinguish destination networks or transport ports.Permit or deny all traffic from a particular source address or subnet.
Extended IPv4 ACLSource and destination IPv4 addresses, protocol, and transport portsTypically placed close to the source to stop unwanted traffic early.Permit HTTPS from one subnet to a specific server while denying other traffic.

Useful Cisco IOS Commands and Configurations

Test IP Reachability

ping <destination-ip-or-hostname>

Ping tests IP reachability with ICMP messages. A failed ping does not by itself prove that every path component is down: ICMP may be filtered, the target may be configured not to respond, or a routing or Layer 2 problem may exist.

Review Interface Status

show ip interface brief
sh ip int b

The second form is an abbreviation. IOS accepts shortened commands only when the abbreviation remains unambiguous. The output summarizes interface IP addresses and status values such as administrative and operational state.

Configure a Management SVI

configure terminal
interface vlan 1
ip address <management-ip> <subnet-mask>
no shutdown

This assigns an IPv4 management address to the VLAN 1 SVI. Remote management also requires an active management VLAN path and, when managing from another subnet, an appropriate default gateway on the Layer 2 switch.

Protect Privileged EXEC Access

configure terminal
enable secret <password-or-secret>

enable secret protects the transition from user EXEC mode to privileged EXEC mode. It is different from a feature that encrypts visible line passwords. Use strong, unique credentials and secure console, VTY, and management access as part of a broader hardening plan.

Inspect ACL, Routing, Switching, and Flash Information

access-list 10 permit <source-ip> <wildcard-mask>
show mac address-table
show ip route
show flash:

The numbered ACL example is a standard ACL because it evaluates a source IPv4 address. The other commands inspect learned MAC entries, routing information, and IOS image storage.

Troubleshooting Practice

Ping to a Target Fails

  1. Confirm the destination IP address and check local interface status with show ip interface brief.
  2. Use ping and remember that its test uses ICMP.
  3. Run show ip route to verify that the device has a path based on the destination IP address.
  4. Check Layer 2 connectivity, VLAN membership, and the target's availability where applicable.

Expected Switched Traffic Does Not Reach a Newly Connected Endpoint

  1. Run show mac address-table.
  2. Determine whether the destination MAC is known.
  3. If it is unknown, explain that the switch floods the unicast frame through eligible ports except the ingress port.
  4. Allow traffic from the endpoint and verify that the switch learns its source MAC address.

A Layer 2 Switch Cannot Be Managed Remotely

  1. Verify that the management SVI has the intended IPv4 address.
  2. Check that the SVI is not administratively shut down.
  3. Verify that the management VLAN exists and has an active Layer 2 path.
  4. Confirm the subnet mask and configure the appropriate default gateway when the management station is on another subnet.

The Device Boots Without the Expected IOS Software

  1. Use show flash: to look for a valid IOS image.
  2. Distinguish flash image storage from NVRAM startup-configuration storage, RAM running-state storage, and ROM bootstrap functions.
  3. If an image exists but is not selected, inspect boot settings and the device's startup process.

Exam-Relevant Notes

  • ICMP is not a transport protocol. Ping uses ICMP; TCP and UDP operate at the Transport layer.
  • IPv4 is 32 bits. Four octets of 8 bits each produce dotted-decimal notation. IPv6 uses 128 bits.
  • Routing and switching use different addresses. Routers select paths using destination IP information; switches forward Ethernet frames using destination MAC information.
  • Lower administrative distance wins. RIP's Cisco default is 120.
  • Standard ACLs are source-based. Use extended ACLs when destination, protocol, or port matching is required.
  • Flash and NVRAM have different jobs. Flash normally stores IOS images; NVRAM normally stores the startup configuration.
  • Unknown unicast is not the same as broadcast. Both may be flooded, but an unknown unicast has a unicast destination MAC that the switch has not learned, while a broadcast uses the broadcast destination.
  • IOS abbreviations must be unambiguous. sh ip int b expands to show ip interface brief.

After reviewing your result, continue with the wider CCNA curriculum and use labs to reinforce the concepts. You can return to this CCNA fundamentals quiz after studying to measure improvement.