2025/2026 LATEST CCNA FINAL EXAM
QUESTIONS WITH VERIFIED SOLUTIONS
TESTED AND APPROVED!!!!!
Manually configure a summary route on an EIGRP router. -- ANSWER--(config)#ip
summary-address eigrp AS NUMBER AND NETWORK AND SUBNETMASK Manually
summarize routes on an OSPF ABR. -- ANSWER--(config)#router ospf PROCESS
NUMBER
(config-router)#area AREA NUMBER range IP NETWORK ADDRESS AND SUBNET
MASK
(config-router)#end
#copy run start
Redistribute route between a RIP network and a EIGRP network. -- ANSWER--
(config)#router rip
(config)#redistribute eigrp AS NUMBER AND THEN METRIC 2
Enable port security. -- ANSWER--(config)#interface INTERFACE
(config)#switchport port-security
1
,Configure port security to allow a specific mac address. -- ANSWER--(config)#interface
INTERFACE
(config)#switchport port-security mac-address MAC ADDRESS
Configure port security for sticky learning. -- ANSWER--(config)#switchport port-security
mac-address sticky
Configure port security maximum allowed mac addresses. -- ANSWER--(config)#switchport
port-security maximum NUMBER
Configure port security violation -- ANSWER--(config)#switchport port-security violation
SHUTDOWN/PROTECT/RESTRICT
Display overview of ports that have port security enabled. -- ANSWER--#show port-security
What is the default STP bridge priority value? -- ANSWER--32,768
What is the configurable value range for STP bridge priority, and what is the increment? --
ANSWER--Range: 0 - 61,440, Increment: 4,096
2
,What is the PDU that STP switches exchange to elect a root bridge, what is the default timer
for it, and hat is the configurable time range for it? -- ANSWER--Bridge Protocol Data Unit
(BPDU), 2 seconds, 1 - 10 seconds.
In STP, what are the active non-root ports called? -- ANSWER--Designated Ports.
In STP what is the port called that is closest to the Root Bridge by cost? -- ANSWER--Root
Port.
What are the STP port states, and what do they mean? -- ANSWER--Blocked (they do not
transmit data, but do listen for BPDUs), Listening (they listen for frames, but do not act on
them), Learning (switch learns MAC addresses and begins transmitting BPDUs), Forwarding
(the table is fully populated and the switch is actively forwarding frames), Disabled.
How long does it take a STP enabled switch network to converge? -- ANSWER--50 seconds.
Configure a Management VLAN Interface -- ANSWER--(config)L#vlan VLAN NUMBER
(config-vlan)#name NAME
(config-vlan)#end
(config)#interface vlan VLAN NUMBER
(config-if)#ip address IP ADDRESS AND SUBNET MASK (config-if)#no shut
(config-if)#end
#copy run start
3
, Configure a sub-interface for Inter-VLAN configuration -- ANSWER--(config)#interface
INTERFACE.SUB-INTERFACE
(config-subif)#no shut
(config-subif)#encapsulation dot1q VLAN NUMBER
(config-subif)#ip address IP ADDRESS AND SUBNET MASK
(config)#end
#copy run start
Configure a trunk interface -- ANSWER--(config)# interface INTERFACE
(config)#switchport trunk encapsulation dot1q
(config)#switchport mode trunk
(config)#exit
#copy run start
Configure a default gateway on a switch -- ANSWER--(config)#ip default-gateway IP
ADDRESS
Configure a hostname -- ANSWER--(config)#hostname HOSTNAME
4
QUESTIONS WITH VERIFIED SOLUTIONS
TESTED AND APPROVED!!!!!
Manually configure a summary route on an EIGRP router. -- ANSWER--(config)#ip
summary-address eigrp AS NUMBER AND NETWORK AND SUBNETMASK Manually
summarize routes on an OSPF ABR. -- ANSWER--(config)#router ospf PROCESS
NUMBER
(config-router)#area AREA NUMBER range IP NETWORK ADDRESS AND SUBNET
MASK
(config-router)#end
#copy run start
Redistribute route between a RIP network and a EIGRP network. -- ANSWER--
(config)#router rip
(config)#redistribute eigrp AS NUMBER AND THEN METRIC 2
Enable port security. -- ANSWER--(config)#interface INTERFACE
(config)#switchport port-security
1
,Configure port security to allow a specific mac address. -- ANSWER--(config)#interface
INTERFACE
(config)#switchport port-security mac-address MAC ADDRESS
Configure port security for sticky learning. -- ANSWER--(config)#switchport port-security
mac-address sticky
Configure port security maximum allowed mac addresses. -- ANSWER--(config)#switchport
port-security maximum NUMBER
Configure port security violation -- ANSWER--(config)#switchport port-security violation
SHUTDOWN/PROTECT/RESTRICT
Display overview of ports that have port security enabled. -- ANSWER--#show port-security
What is the default STP bridge priority value? -- ANSWER--32,768
What is the configurable value range for STP bridge priority, and what is the increment? --
ANSWER--Range: 0 - 61,440, Increment: 4,096
2
,What is the PDU that STP switches exchange to elect a root bridge, what is the default timer
for it, and hat is the configurable time range for it? -- ANSWER--Bridge Protocol Data Unit
(BPDU), 2 seconds, 1 - 10 seconds.
In STP, what are the active non-root ports called? -- ANSWER--Designated Ports.
In STP what is the port called that is closest to the Root Bridge by cost? -- ANSWER--Root
Port.
What are the STP port states, and what do they mean? -- ANSWER--Blocked (they do not
transmit data, but do listen for BPDUs), Listening (they listen for frames, but do not act on
them), Learning (switch learns MAC addresses and begins transmitting BPDUs), Forwarding
(the table is fully populated and the switch is actively forwarding frames), Disabled.
How long does it take a STP enabled switch network to converge? -- ANSWER--50 seconds.
Configure a Management VLAN Interface -- ANSWER--(config)L#vlan VLAN NUMBER
(config-vlan)#name NAME
(config-vlan)#end
(config)#interface vlan VLAN NUMBER
(config-if)#ip address IP ADDRESS AND SUBNET MASK (config-if)#no shut
(config-if)#end
#copy run start
3
, Configure a sub-interface for Inter-VLAN configuration -- ANSWER--(config)#interface
INTERFACE.SUB-INTERFACE
(config-subif)#no shut
(config-subif)#encapsulation dot1q VLAN NUMBER
(config-subif)#ip address IP ADDRESS AND SUBNET MASK
(config)#end
#copy run start
Configure a trunk interface -- ANSWER--(config)# interface INTERFACE
(config)#switchport trunk encapsulation dot1q
(config)#switchport mode trunk
(config)#exit
#copy run start
Configure a default gateway on a switch -- ANSWER--(config)#ip default-gateway IP
ADDRESS
Configure a hostname -- ANSWER--(config)#hostname HOSTNAME
4
