CCNA - Cisco Certified Network Associate Practice Questions: IP Services Domain

Test your CCNA - Cisco Certified Network Associate knowledge with 10 practice questions from the IP Services domain. Includes detailed explanations and answers.

CCNA - Cisco Certified Network Associate Practice Questions

Master the IP Services Domain

Test your knowledge in the IP Services domain with these 10 practice questions. Each question is designed to help you prepare for the CCNA - Cisco Certified Network Associate certification exam with detailed explanations to reinforce your learning.

Question 1

You are configuring an ACL to permit HTTP traffic from a specific subnet (192.168.1.0/24) to a web server with IP 10.10.10.10. Which of the following ACL entries should be used?

A) access-list 100 permit tcp 192.168.1.0 0.0.0.255 any eq 80

B) access-list 100 permit tcp 192.168.1.0 0.0.0.255 host 10.10.10.10 eq 80

C) access-list 100 permit tcp any host 10.10.10.10 eq 80

D) access-list 100 permit tcp host 192.168.1.0 0.0.0.255 eq 80

Show Answer & Explanation

Correct Answer: B

Explanation: CORRECT: 'access-list 100 permit tcp 192.168.1.0 0.0.0.255 host 10.10.10.10 eq 80' correctly specifies the source subnet and destination host with the appropriate protocol and port. Uses 'any' as the destination, which is too broad. Correctly specifies both source and destination. Uses 'any' as the source, which is not restrictive enough. Incorrectly uses 'host' with a subnet mask, which is invalid syntax.

Question 2

Which command is used to set the lease duration for a DHCP pool to 12 hours?

A) lease 0 12 0

B) lease 12 0

C) lease 12

D) lease 0 12

Show Answer & Explanation

Correct Answer: A

Explanation: The 'lease 0 12 0' command sets the DHCP lease time to 12 hours, with the format being days, hours, and minutes.

Question 3

A network administrator needs to configure an IPv6 address on a router interface. Which command correctly assigns an IPv6 address to an interface?

A) ip address 2001:0db8:85a3::8a2e:0370:7334/64

B) ipv6 address 2001:0db8:85a3::8a2e:0370:7334/64

C) ipv6 enable 2001:0db8:85a3::8a2e:0370:7334/64

D) ip address 2001:0db8:85a3::8a2e:0370:7334

Show Answer & Explanation

Correct Answer: B

Explanation: CORRECT: 'ipv6 address 2001:0db8:85a3::8a2e:0370:7334/64' assigns an IPv6 address to an interface. This command is for IPv4 addresses, not IPv6. 'ipv6 enable' is used to enable IPv6 on an interface but not to assign an address. This command is missing the subnet prefix length.

Question 4

In DHCP, what is the purpose of the 'lease time' setting?

A) It defines the time period a DHCP client can keep an IP address before renewing it.

B) It determines the time interval for DNS updates.

C) It sets the maximum time allowed for DHCP discovery.

D) It specifies the time interval for DHCP rebinding.

Show Answer & Explanation

Correct Answer: A

Explanation: The lease time specifies how long a DHCP client can use an IP address before it must renew the lease with the DHCP server.

Question 5

In a network using DHCP relay, which command is used to specify the DHCP server's IP address on a Cisco router?

A) ip helper-address 192.168.1.1

B) ip dhcp-server 192.168.1.1

C) ip dhcp relay 192.168.1.1

D) ip dhcp forwarding 192.168.1.1

Show Answer & Explanation

Correct Answer: A

Explanation: The 'ip helper-address' command is used to forward DHCP requests to a specified DHCP server IP address.

Question 6

A network engineer needs to configure a router to prefer EIGRP routes over OSPF routes. Which command should be used?

A) router eigrp 1 variance 2

B) router ospf 1 distance 90

C) router eigrp 1 metric weights 0 1 1 1 1 1

D) router ospf 1 router-id 1.1.1.1

Show Answer & Explanation

Correct Answer: B

Explanation: CORRECT: Setting the OSPF administrative distance to 90 makes it less preferred than EIGRP (default AD 90). Variance is used for unequal cost load balancing in EIGRP, not for preferring EIGRP over OSPF. Correctly adjusts OSPF's administrative distance to prefer EIGRP. Adjusts EIGRP metric calculation, not preference over OSPF. Sets OSPF router ID, not affecting route preference.

Question 7

You need to ensure that a router can send ICMP unreachable messages when a packet cannot be delivered. Which command is used to enable this feature?

A) ip icmp rate-limit unreachable

B) no ip unreachables

C) ip unreachables

D) ip icmp unreachable

Show Answer & Explanation

Correct Answer: C

Explanation: CORRECT: 'ip unreachables' enables the sending of ICMP unreachable messages. This command limits the rate of ICMP unreachable messages, not enabling them. This command disables the sending of ICMP unreachable messages. This is not a valid command for enabling ICMP unreachable messages.

Question 8

A network administrator needs to configure an IPv6 access list. Which command begins the configuration of an IPv6 access list?

A) ip access-list extended

B) ipv6 access-list

C) access-list ipv6

D) ipv6 access-list extended

Show Answer & Explanation

Correct Answer: B

Explanation: CORRECT: 'ipv6 access-list' begins the configuration of an IPv6 access list. This command is for IPv4 access lists, not IPv6. This is not a valid command for starting an IPv6 access list. This command is not valid as 'extended' is not used in IPv6 ACL configuration.

Question 9

A network administrator needs to ensure that all devices on the network use the same time. Which service should be configured?

A) DHCP

B) DNS

C) NTP

D) SNMP

Show Answer & Explanation

Correct Answer: C

Explanation: NTP (Network Time Protocol) synchronizes clocks across a network. The other options do not provide time synchronization.

Question 10

Which protocol is primarily used to synchronize time across a network?

A) SNMP

B) DHCP

C) NTP

D) DNS

Show Answer & Explanation

Correct Answer: C

Explanation: NTP (Network Time Protocol) is specifically designed for time synchronization. SNMP is for network management, DHCP for IP address allocation, and DNS for name resolution.

Ready to Accelerate Your CCNA - Cisco Certified Network Associate Preparation?

Join thousands of professionals who are advancing their careers through expert certification preparation with FlashGenius.

  • ✅ Unlimited practice questions across all CCNA - Cisco Certified Network Associate domains
  • ✅ Full-length exam simulations with real-time scoring
  • ✅ AI-powered performance tracking and weak area identification
  • ✅ Personalized study plans with adaptive learning
  • ✅ Mobile-friendly platform for studying anywhere, anytime
  • ✅ Expert explanations and study resources
Start Free Practice Now

Already have an account? Sign in here

About CCNA - Cisco Certified Network Associate Certification

The CCNA - Cisco Certified Network Associate certification validates your expertise in ip services and other critical domains. Our comprehensive practice questions are carefully crafted to mirror the actual exam experience and help you identify knowledge gaps before test day.

Explore More CCNA Practice Modules