CCNA 2 FINAL EXAM ANSWERS AND
QUESTIONS UPDATE 2026 WITH
VERIFIED SOLUTIONS 100%
CORRECT A+
Why would an administrator use a network security auditing tool to flood the switch
MAC address table with fictitious MAC addresses? - CORRECT ANSWES -- to
determine which ports are not correctly configured to prevent MAC address flooding*
A new network policy requires an ACL to deny HTTP access from all guests to a web
server at the main office. All guests use addressing from the IPv6 subnet
2001:DB8:19:C::/64. The web server is configured with the address
2001:DB8:19:A::105/64. Implementing the NoWeb ACL on the interface for the guest
LAN requires which three commands? (Choose three.) - CORRECT ANSWES -- deny
tcp any host 2001:DB8:19:A::105 eq 80*
permit ipv6 any any*
An OSPF router has three directly connected networks; 172.16.0.0/16, 172.16.1.0/16,
and 172.16.2.0/16. Which OSPF network command would advertise only the 172.16.1.0
network to neighbors? - CORRECT ANSWES -- router(config-router)# network
172.16.1.0 0.0.255.255 area 0*
Refer to the exhibit. Which type of route is 172.16.0.0/16? - CORRECT ANSWES --
level 1 parent route
Which subnet mask would be used as the classful mask for the IP address
192.135.250.27? - CORRECT ANSWES -- 255.255.255.0*
Which subnet mask would be used as the classful mask for the IP address
128.107.52.27? - CORRECT ANSWES -- 255.255.0.0*
The buffers for packet processing and the running configuration file are temporarily
stored in which type of router memory? - CORRECT ANSWES -- RAM*
A network technician is configuring port security on switches. The interfaces on the
switches are configured in such a way that when a violation occurs, packets with
unknown source address are dropped and no notification is sent. Which violation mode
is configured on the interfaces? - CORRECT ANSWES -- protect*
, A standard ACL has been configured on a router to allow only clients from the
10.11.110.0/24 network to telnet or to ssh to the VTY lines of the router. Which
command will correctly apply this ACL? - CORRECT ANSWES -- access-group 11 in*
What address will summarize the LANs attached to routers 2-A and 3-A and can be
configured in a summary static route to advertise them to an upstream neighbor? -
CORRECT ANSWES -- 10.0.0.0/21*
A security specialist designs an ACL to deny access to a web server from all sales staff.
The sales staff are assigned addressing from the IPv6 subnet 2001:db8:48:2c::/64. The
web server is assigned the address 2001:db8:48:1c::50/64. Configuring the WebFilter
ACL on the LAN interface for the sales staff will require which three commands?
(Choose three.) - CORRECT ANSWES -- deny tcp host 2001:db8:48:1c::50 any eq 80*
deny tcp any host 2001:db8:48:1c::50 eq 80*
deny ipv6 any any*
. To enable RIP routing for a specific subnet, the configuration command network
192.168.5.64 was entered by the network administrator. What address, if any, appears
in the running configuration file to identify this network? - CORRECT ANSWES --
192.168.5.0
Refer to the exhibit. An ACL preventing FTP and HTTP access to the interval web
server from all teaching assistants has been implemented in the Board Office. The
address of the web server is 172.20.1.100 and all teaching assistants are assigned
addresses in the 172.21.1.0/24 network. After implement the ACL, access to all servers
is denied. What is the problem? - CORRECT ANSWES -- **named ACLs requite the
use of port numbers**
a router learns of multiple toward the same destination. Which value in a routing table
replesents the trustworthiness of learned routes and is used by the router to determine
which route to install into the routing table for specific situation? - CORRECT ANSWES
-- metric
What is the minimum configuration for a router interface that is participating in IPv6
routing? - CORRECT ANSWES -- to have only a link-local IPv6 address*
Which two statements are true about half-duplex and full-duplex communications?
(Choose two.) - CORRECT ANSWES -- Full duplex offers 100 percent potential use of
the bandwidth.*
Full duplex allows both ends to transmit and receive simultaneously.*
Fill in the blank.
QUESTIONS UPDATE 2026 WITH
VERIFIED SOLUTIONS 100%
CORRECT A+
Why would an administrator use a network security auditing tool to flood the switch
MAC address table with fictitious MAC addresses? - CORRECT ANSWES -- to
determine which ports are not correctly configured to prevent MAC address flooding*
A new network policy requires an ACL to deny HTTP access from all guests to a web
server at the main office. All guests use addressing from the IPv6 subnet
2001:DB8:19:C::/64. The web server is configured with the address
2001:DB8:19:A::105/64. Implementing the NoWeb ACL on the interface for the guest
LAN requires which three commands? (Choose three.) - CORRECT ANSWES -- deny
tcp any host 2001:DB8:19:A::105 eq 80*
permit ipv6 any any*
An OSPF router has three directly connected networks; 172.16.0.0/16, 172.16.1.0/16,
and 172.16.2.0/16. Which OSPF network command would advertise only the 172.16.1.0
network to neighbors? - CORRECT ANSWES -- router(config-router)# network
172.16.1.0 0.0.255.255 area 0*
Refer to the exhibit. Which type of route is 172.16.0.0/16? - CORRECT ANSWES --
level 1 parent route
Which subnet mask would be used as the classful mask for the IP address
192.135.250.27? - CORRECT ANSWES -- 255.255.255.0*
Which subnet mask would be used as the classful mask for the IP address
128.107.52.27? - CORRECT ANSWES -- 255.255.0.0*
The buffers for packet processing and the running configuration file are temporarily
stored in which type of router memory? - CORRECT ANSWES -- RAM*
A network technician is configuring port security on switches. The interfaces on the
switches are configured in such a way that when a violation occurs, packets with
unknown source address are dropped and no notification is sent. Which violation mode
is configured on the interfaces? - CORRECT ANSWES -- protect*
, A standard ACL has been configured on a router to allow only clients from the
10.11.110.0/24 network to telnet or to ssh to the VTY lines of the router. Which
command will correctly apply this ACL? - CORRECT ANSWES -- access-group 11 in*
What address will summarize the LANs attached to routers 2-A and 3-A and can be
configured in a summary static route to advertise them to an upstream neighbor? -
CORRECT ANSWES -- 10.0.0.0/21*
A security specialist designs an ACL to deny access to a web server from all sales staff.
The sales staff are assigned addressing from the IPv6 subnet 2001:db8:48:2c::/64. The
web server is assigned the address 2001:db8:48:1c::50/64. Configuring the WebFilter
ACL on the LAN interface for the sales staff will require which three commands?
(Choose three.) - CORRECT ANSWES -- deny tcp host 2001:db8:48:1c::50 any eq 80*
deny tcp any host 2001:db8:48:1c::50 eq 80*
deny ipv6 any any*
. To enable RIP routing for a specific subnet, the configuration command network
192.168.5.64 was entered by the network administrator. What address, if any, appears
in the running configuration file to identify this network? - CORRECT ANSWES --
192.168.5.0
Refer to the exhibit. An ACL preventing FTP and HTTP access to the interval web
server from all teaching assistants has been implemented in the Board Office. The
address of the web server is 172.20.1.100 and all teaching assistants are assigned
addresses in the 172.21.1.0/24 network. After implement the ACL, access to all servers
is denied. What is the problem? - CORRECT ANSWES -- **named ACLs requite the
use of port numbers**
a router learns of multiple toward the same destination. Which value in a routing table
replesents the trustworthiness of learned routes and is used by the router to determine
which route to install into the routing table for specific situation? - CORRECT ANSWES
-- metric
What is the minimum configuration for a router interface that is participating in IPv6
routing? - CORRECT ANSWES -- to have only a link-local IPv6 address*
Which two statements are true about half-duplex and full-duplex communications?
(Choose two.) - CORRECT ANSWES -- Full duplex offers 100 percent potential use of
the bandwidth.*
Full duplex allows both ends to transmit and receive simultaneously.*
Fill in the blank.
