{"id":169244,"date":"2026-06-19T10:58:55","date_gmt":"2026-06-19T07:58:55","guid":{"rendered":"https:\/\/computingforgeeks.com\/?p=169244"},"modified":"2026-06-19T10:58:55","modified_gmt":"2026-06-19T07:58:55","slug":"ccna-domain-1-practice-test","status":"publish","type":"post","link":"https:\/\/computingforgeeks.com\/ccna-domain-1-practice-test\/","title":{"rendered":"CCNA 200-301 Domain 1 Practice Test: Network Fundamentals"},"content":{"rendered":"<p>Domain 1, Network Fundamentals, is a 20 percent block of the CCNA 200-301 exam and the foundation the other five domains build on, so it is where most candidates either build momentum or lose easy points. This practice test pulls questions from across the whole domain so you can find the weak spots before exam day finds them for you.<\/p>\n<p>The questions below are the same validated items used in the per-topic quizzes across this series. The bank is weighted toward the heaviest clusters of sub-topics, so addressing and subnetting carry the most questions here, with the models, switching, physical layer, and virtualization topics filling out the rest. Every answer has a written explanation, and the test draws a fresh mix each time you retake it.<\/p>\n<p><em>The question bank is current as of June 2026 and tracks the live CCNA 200-301 (v1.1) exam topics.<\/em><\/p>\n<h2>How to use this practice test<\/h2>\n<p>Work through every question, then read the explanation on each one, especially the ones you got right by guessing. The goal is not the score on a single run; it is to turn every explanation you did not already know into a topic you go back and study. When a question exposes a gap, follow the matching guide in the topic list below, then retake the test for a new set of questions.<\/p>\n<p>Treat anything below about 85 percent as a signal to review that topic before you sit the real exam. Subnetting questions in particular reward speed, so if those slow you down, drill them until the math is automatic.<\/p>\n<h2>Take the Domain 1 practice test<\/h2>\n<p>Thirty questions, drawn at random from the full Domain 1 bank and re-sampled on every retake:<\/p>\n<div class=\"cfg-quiz\" data-quiz=\"{\n  &quot;id&quot;: &quot;ccna-domain1&quot;,\n  &quot;title&quot;: &quot;CCNA 200-301 Domain 1 (Network Fundamentals) practice test&quot;,\n  &quot;objective&quot;: &quot;Domain 1 Network Fundamentals (20% of the exam)&quot;,\n  &quot;intro&quot;: &quot;An exam-weighted practice set drawn from the Domain 1 topics: addressing and subnetting, the OSI and TCP\/IP models, switching, network devices and designs, cabling, PoE, wireless, host verification, and virtualization. Every question and answer is the same validated item used in the per-topic quizzes. Retake it for a fresh mix.&quot;,\n  &quot;questions&quot;: [\n    {\n      &quot;q&quot;: &quot;How many usable host addresses are in a \/27 subnet?&quot;,\n      &quot;options&quot;: [\n        &quot;30&quot;,\n        &quot;32&quot;,\n        &quot;28&quot;,\n        &quot;62&quot;\n      ],\n      &quot;answer&quot;: 0,\n      &quot;explanation&quot;: &quot;A \/27 leaves 5 host bits, so 2^5 = 32 total addresses, minus the network and broadcast = 30 usable.&quot;,\n      &quot;validated&quot;: &quot;computed&quot;\n    },\n    {\n      &quot;q&quot;: &quot;What prefix length matches the mask 255.255.254.0?&quot;,\n      &quot;options&quot;: [\n        &quot;\/24&quot;,\n        &quot;\/23&quot;,\n        &quot;\/22&quot;,\n        &quot;\/25&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;254 = 11111110 = 7 network bits in the third octet, so 8 + 8 + 7 = \/23.&quot;,\n      &quot;validated&quot;: &quot;computed&quot;\n    },\n    {\n      &quot;q&quot;: &quot;Which is the network address for the host 172.16.5.130\/26?&quot;,\n      &quot;options&quot;: [\n        &quot;172.16.5.128&quot;,\n        &quot;172.16.5.64&quot;,\n        &quot;172.16.5.96&quot;,\n        &quot;172.16.5.192&quot;\n      ],\n      &quot;answer&quot;: 0,\n      &quot;explanation&quot;: &quot;\/26 block size is 64, so subnets fall at .0, .64, .128, .192; 130 is in the 128 block, so the network is 172.16.5.128.&quot;,\n      &quot;validated&quot;: &quot;computed&quot;\n    },\n    {\n      &quot;q&quot;: &quot;Which address can be assigned to a router interface in the subnet 10.2.1.0\/30?&quot;,\n      &quot;options&quot;: [\n        &quot;10.2.1.1&quot;,\n        &quot;10.2.1.0&quot;,\n        &quot;10.2.1.3&quot;,\n        &quot;255.255.255.252&quot;\n      ],\n      &quot;answer&quot;: 0,\n      &quot;explanation&quot;: &quot;In a \/30 the .0 is the network and .3 is the broadcast; only .1 and .2 are usable, so 10.2.1.1 is valid.&quot;,\n      &quot;validated&quot;: &quot;computed&quot;\n    },\n    {\n      &quot;q&quot;: &quot;To which subnet does the host 172.28.228.144\/21 belong?&quot;,\n      &quot;options&quot;: [\n        &quot;172.28.224.0&quot;,\n        &quot;172.28.228.0&quot;,\n        &quot;172.28.232.0&quot;,\n        &quot;172.28.216.0&quot;\n      ],\n      &quot;answer&quot;: 0,\n      &quot;explanation&quot;: &quot;A \/21 gives a third-octet increment of 8; 228 \/ 8 = 28.5, floor 28, 28 x 8 = 224, so the network is 172.28.224.0.&quot;,\n      &quot;validated&quot;: &quot;computed&quot;\n    },\n    {\n      &quot;q&quot;: &quot;An office of 20 users needs the most address-efficient mask. Which one?&quot;,\n      &quot;options&quot;: [\n        &quot;\/27&quot;,\n        &quot;\/28&quot;,\n        &quot;\/26&quot;,\n        &quot;\/29&quot;\n      ],\n      &quot;answer&quot;: 0,\n      &quot;explanation&quot;: &quot;\/28 gives 14 usable (too few for 20); \/27 gives 30 usable, the smallest that fits 20, so \/27 (255.255.255.224).&quot;,\n      &quot;validated&quot;: &quot;computed&quot;\n    },\n    {\n      &quot;q&quot;: &quot;A subnet must support 50 hosts. What is the smallest mask that works?&quot;,\n      &quot;options&quot;: [\n        &quot;\/26&quot;,\n        &quot;\/27&quot;,\n        &quot;\/25&quot;,\n        &quot;\/28&quot;\n      ],\n      &quot;answer&quot;: 0,\n      &quot;explanation&quot;: &quot;2^5 - 2 = 30 is too few; 2^6 - 2 = 62 covers 50, so \/26 is the smallest mask that fits.&quot;,\n      &quot;validated&quot;: &quot;computed&quot;\n    },\n    {\n      &quot;q&quot;: &quot;A LAN needs 100 hosts. Which mask is the most efficient choice?&quot;,\n      &quot;options&quot;: [\n        &quot;\/25&quot;,\n        &quot;\/24&quot;,\n        &quot;\/26&quot;,\n        &quot;\/23&quot;\n      ],\n      &quot;answer&quot;: 0,\n      &quot;explanation&quot;: &quot;2^6 - 2 = 62 is too few; 2^7 - 2 = 126 covers 100, so \/25 is the smallest mask that fits.&quot;,\n      &quot;validated&quot;: &quot;computed&quot;\n    },\n    {\n      &quot;q&quot;: &quot;A routing table shows \\&quot;10.0.0.0\/8 is variably subnetted, 5 subnets, 4 masks\\&quot;. What does it mean?&quot;,\n      &quot;options&quot;: [\n        &quot;Five subnets of the 10.0.0.0 network are installed using four different masks&quot;,\n        &quot;The network has five masks and four subnets&quot;,\n        &quot;VLSM failed and summarized to \/8&quot;,\n        &quot;There are five routers and four links&quot;\n      ],\n      &quot;answer&quot;: 0,\n      &quot;explanation&quot;: &quot;The line confirms VLSM is active: five subnets under the 10.0.0.0 classful parent are in the table, and they use four distinct masks.&quot;,\n      &quot;validated&quot;: &quot;doc&quot;\n    },\n    {\n      &quot;q&quot;: &quot;An interface shows &#039;administratively down&#039; in show ip interface brief, but its IP address is already configured. Which command brings it up?&quot;,\n      &quot;options&quot;: [\n        &quot;no shutdown&quot;,\n        &quot;ip address dhcp&quot;,\n        &quot;enable&quot;,\n        &quot;clock rate 64000&quot;\n      ],\n      &quot;answer&quot;: 0,\n      &quot;explanation&quot;: &quot;Cisco router interfaces are administratively down by default. no shutdown enables the interface; the address is already set, so that is the only missing step.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;type&quot;: &quot;numeric&quot;,\n      &quot;q&quot;: &quot;A host has IP 172.20.5.50 with a \/24 mask. Type the subnet ID.&quot;,\n      &quot;answer&quot;: &quot;172.20.5.0&quot;,\n      &quot;hint&quot;: &quot;Set the host bits (the last octet for a \/24) to zero.&quot;,\n      &quot;placeholder&quot;: &quot;x.x.x.x&quot;,\n      &quot;explanation&quot;: &quot;A \/24 makes the first three octets the network. Zeroing the host octet gives the subnet ID 172.20.5.0.&quot;,\n      &quot;validated&quot;: &quot;computed&quot;\n    },\n    {\n      &quot;q&quot;: &quot;In show ip interface brief, the Method column reads &#039;manual&#039;. What does that mean?&quot;,\n      &quot;options&quot;: [\n        &quot;The address was set by hand (statically configured)&quot;,\n        &quot;The address was leased from a DHCP server&quot;,\n        &quot;The address was learned through BOOTP&quot;,\n        &quot;No address is configured on the interface&quot;\n      ],\n      &quot;answer&quot;: 0,\n      &quot;explanation&quot;: &quot;manual means the address was configured by hand with the ip address command. A DHCP-leased address would show DHCP in the Method column.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;type&quot;: &quot;match&quot;,\n      &quot;q&quot;: &quot;Match each IPv4 address class to its first-octet range.&quot;,\n      &quot;pairs&quot;: [\n        {\n          &quot;left&quot;: &quot;Class A&quot;,\n          &quot;right&quot;: &quot;1 to 126&quot;\n        },\n        {\n          &quot;left&quot;: &quot;Class B&quot;,\n          &quot;right&quot;: &quot;128 to 191&quot;\n        },\n        {\n          &quot;left&quot;: &quot;Class C&quot;,\n          &quot;right&quot;: &quot;192 to 223&quot;\n        }\n      ],\n      &quot;explanation&quot;: &quot;The first octet alone sets the class: 1 to 126 is Class A, 128 to 191 is Class B, and 192 to 223 is Class C. (127 is reserved for loopback.)&quot;,\n      &quot;validated&quot;: &quot;doc&quot;\n    },\n    {\n      &quot;q&quot;: &quot;Which IPv6 address type is generated automatically on every IPv6-enabled interface with no configuration?&quot;,\n      &quot;options&quot;: [\n        &quot;Global unicast&quot;,\n        &quot;Unique local&quot;,\n        &quot;Link-local&quot;,\n        &quot;Anycast&quot;\n      ],\n      &quot;answer&quot;: 2,\n      &quot;explanation&quot;: &quot;A link-local address (FE80::\/10) is created automatically the moment IPv6 is active on an interface. Global unicast and unique local addresses must be configured.&quot;,\n      &quot;validated&quot;: &quot;doc&quot;\n    },\n    {\n      &quot;q&quot;: &quot;In show ipv6 interface output, what do the entries under &#039;Joined group address(es)&#039; represent?&quot;,\n      &quot;options&quot;: [\n        &quot;Multicast groups the interface has joined&quot;,\n        &quot;Neighbor MAC addresses learned by NDP&quot;,\n        &quot;Configured static routes&quot;,\n        &quot;Active DHCPv6 leases&quot;\n      ],\n      &quot;answer&quot;: 0,\n      &quot;explanation&quot;: &quot;They are the multicast groups the interface belongs to, such as FF02::1 (all-nodes), FF02::2 (all-routers), and a solicited-node address for each unicast address.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;type&quot;: &quot;multi&quot;,\n      &quot;q&quot;: &quot;Which TWO statements are true of link-local (FE80) addresses?&quot;,\n      &quot;options&quot;: [\n        &quot;They are generated automatically on every IPv6 interface&quot;,\n        &quot;They are never forwarded past the local link&quot;,\n        &quot;They are assigned by the ISP&quot;,\n        &quot;They are routable on the internet&quot;\n      ],\n      &quot;answers&quot;: [\n        0,\n        1\n      ],\n      &quot;explanation&quot;: &quot;Link-local addresses are auto-generated and stay on the local link (used for NDP, routing adjacencies, and next-hop). They are neither ISP-assigned nor internet-routable.&quot;,\n      &quot;validated&quot;: &quot;doc&quot;\n    },\n    {\n      &quot;q&quot;: &quot;Which PDU name is correct for data at Layer 3 (Network) of the OSI model?&quot;,\n      &quot;options&quot;: [\n        &quot;segment&quot;,\n        &quot;packet&quot;,\n        &quot;frame&quot;,\n        &quot;bits&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;Layer 3 (Network) data is a packet. Segment is Layer 4, frame is Layer 2, and bits are Layer 1.&quot;,\n      &quot;validated&quot;: &quot;doc&quot;\n    },\n    {\n      &quot;q&quot;: &quot;The OSI model has 7 layers. How many layers does the TCP\/IP model taught in Cisco certification material have?&quot;,\n      &quot;options&quot;: [\n        &quot;4&quot;,\n        &quot;5&quot;,\n        &quot;6&quot;,\n        &quot;7&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;Cisco material uses a 5-layer TCP\/IP model (Physical, Data Link, Network, Transport, Application). The original RFC 1122 model has 4 layers, merging Physical and Data Link into Network Access.&quot;,\n      &quot;validated&quot;: &quot;doc&quot;\n    },\n    {\n      &quot;q&quot;: &quot;In the four-layer TCP\/IP model (RFC 1122), which single layer corresponds to OSI layers 5, 6, and 7?&quot;,\n      &quot;options&quot;: [\n        &quot;Application&quot;,\n        &quot;Transport&quot;,\n        &quot;Internet&quot;,\n        &quot;Network Access&quot;\n      ],\n      &quot;answer&quot;: 0,\n      &quot;explanation&quot;: &quot;TCP\/IP collapses OSI Session, Presentation, and Application into one Application layer. Internet maps to OSI Layer 3; Network Access maps to OSI Layers 1 and 2.&quot;,\n      &quot;validated&quot;: &quot;doc&quot;\n    },\n    {\n      &quot;q&quot;: &quot;Which TCP mechanism prevents the sender from overwhelming the receiver&#039;s buffer?&quot;,\n      &quot;options&quot;: [\n        &quot;Error recovery&quot;,\n        &quot;Windowing&quot;,\n        &quot;The three-way handshake&quot;,\n        &quot;Port multiplexing&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;Windowing is flow control: the receiver advertises how many bytes it can accept before it must acknowledge. Error recovery (retransmission) is a separate mechanism.&quot;,\n      &quot;validated&quot;: &quot;doc&quot;\n    },\n    {\n      &quot;type&quot;: &quot;match&quot;,\n      &quot;q&quot;: &quot;Match each application to its well-known port and transport.&quot;,\n      &quot;pairs&quot;: [\n        {\n          &quot;left&quot;: &quot;SSH&quot;,\n          &quot;right&quot;: &quot;22 \/ TCP&quot;\n        },\n        {\n          &quot;left&quot;: &quot;HTTPS&quot;,\n          &quot;right&quot;: &quot;443 \/ TCP&quot;\n        },\n        {\n          &quot;left&quot;: &quot;TFTP&quot;,\n          &quot;right&quot;: &quot;69 \/ UDP&quot;\n        },\n        {\n          &quot;left&quot;: &quot;NTP&quot;,\n          &quot;right&quot;: &quot;123 \/ UDP&quot;\n        }\n      ],\n      &quot;explanation&quot;: &quot;SSH 22\/TCP, HTTPS 443\/TCP, TFTP 69\/UDP, NTP 123\/UDP. TFTP and NTP are small or frequent exchanges that favour UDP.&quot;,\n      &quot;validated&quot;: &quot;doc&quot;\n    },\n    {\n      &quot;q&quot;: &quot;Which field gives UDP error DETECTION (but not correction)?&quot;,\n      &quot;options&quot;: [\n        &quot;Sequence number&quot;,\n        &quot;Window size&quot;,\n        &quot;Checksum&quot;,\n        &quot;Acknowledgment number&quot;\n      ],\n      &quot;answer&quot;: 2,\n      &quot;explanation&quot;: &quot;The checksum is UDP&#039;s only error-detection field, and it only detects corruption. UDP cannot correct or retransmit. The other fields exist in TCP, not UDP.&quot;,\n      &quot;validated&quot;: &quot;doc&quot;\n    },\n    {\n      &quot;q&quot;: &quot;Which device forwards traffic using a MAC address table?&quot;,\n      &quot;options&quot;: [\n        &quot;Router&quot;,\n        &quot;Layer 2 switch&quot;,\n        &quot;Firewall&quot;,\n        &quot;Wireless LAN controller&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;A Layer 2 switch learns MAC addresses and forwards Ethernet frames out the port where the destination MAC lives. A router uses a routing table and forwards IP packets.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;type&quot;: &quot;match&quot;,\n      &quot;q&quot;: &quot;Match each device to the table or job it relies on.&quot;,\n      &quot;pairs&quot;: [\n        {\n          &quot;left&quot;: &quot;Router&quot;,\n          &quot;right&quot;: &quot;IP routing table&quot;\n        },\n        {\n          &quot;left&quot;: &quot;Layer 2 switch&quot;,\n          &quot;right&quot;: &quot;MAC address table&quot;\n        },\n        {\n          &quot;left&quot;: &quot;Next-generation firewall&quot;,\n          &quot;right&quot;: &quot;Allow or deny policy&quot;\n        },\n        {\n          &quot;left&quot;: &quot;Wireless LAN controller&quot;,\n          &quot;right&quot;: &quot;Manages lightweight APs&quot;\n        }\n      ],\n      &quot;explanation&quot;: &quot;A router decides on its routing table, a Layer 2 switch on its MAC address table, a firewall on its allow\/deny policy, and a WLC centralizes management of its lightweight APs.&quot;,\n      &quot;validated&quot;: &quot;doc&quot;\n    },\n    {\n      &quot;q&quot;: &quot;Which layer does NOT exist in a two-tier (collapsed core) campus design?&quot;,\n      &quot;options&quot;: [\n        &quot;Access&quot;,\n        &quot;Distribution&quot;,\n        &quot;Core&quot;,\n        &quot;Data link&quot;\n      ],\n      &quot;answer&quot;: 2,\n      &quot;explanation&quot;: &quot;A two-tier design has only access and distribution layers. The core layer&#039;s high-speed forwarding job is collapsed into the distribution switches, so there is no separate core tier.&quot;,\n      &quot;validated&quot;: &quot;doc&quot;\n    },\n    {\n      &quot;type&quot;: &quot;match&quot;,\n      &quot;q&quot;: &quot;Match each architecture to where it belongs.&quot;,\n      &quot;pairs&quot;: [\n        {\n          &quot;left&quot;: &quot;Spine-leaf&quot;,\n          &quot;right&quot;: &quot;Data center&quot;\n        },\n        {\n          &quot;left&quot;: &quot;Three-tier&quot;,\n          &quot;right&quot;: &quot;Multi-building campus&quot;\n        },\n        {\n          &quot;left&quot;: &quot;SOHO&quot;,\n          &quot;right&quot;: &quot;Home or small office&quot;\n        },\n        {\n          &quot;left&quot;: &quot;Ethernet WAN&quot;,\n          &quot;right&quot;: &quot;Connecting distant sites&quot;\n        }\n      ],\n      &quot;explanation&quot;: &quot;Spine-leaf belongs in the data center (east-west traffic), three-tier in a large multi-building campus, SOHO in a home or small office, and a WAN technology like Ethernet WAN connects geographically separated sites.&quot;,\n      &quot;validated&quot;: &quot;doc&quot;\n    },\n    {\n      &quot;q&quot;: &quot;What does a Cisco switch use to build its MAC address table?&quot;,\n      &quot;options&quot;: [\n        &quot;The destination MAC and the egress port&quot;,\n        &quot;The source MAC and the ingress port&quot;,\n        &quot;The destination IP and the egress port&quot;,\n        &quot;The source IP and the ingress port&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;A switch reads the SOURCE MAC of every incoming frame and records it against the port the frame arrived on (the ingress port) and the VLAN. Destinations are only looked up, never learned.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;q&quot;: &quot;A switch finds the destination MAC in its table on the SAME port the frame arrived on. What happens?&quot;,\n      &quot;options&quot;: [\n        &quot;The frame is flooded&quot;,\n        &quot;The frame is forwarded out all other ports&quot;,\n        &quot;The frame is filtered (silently dropped)&quot;,\n        &quot;The entry is deleted&quot;\n      ],\n      &quot;answer&quot;: 2,\n      &quot;explanation&quot;: &quot;If the destination is on the same port as the source, both devices already share that segment and have heard each other. The switch filters (drops) the frame so it is not echoed back onto the segment it came from.&quot;,\n      &quot;validated&quot;: &quot;doc&quot;\n    },\n    {\n      &quot;q&quot;: &quot;Why can the same MAC address appear more than once in show mac address-table output?&quot;,\n      &quot;options&quot;: [\n        &quot;The switch is faulty&quot;,\n        &quot;Learning is per-VLAN, so a MAC seen in two VLANs gets one entry per VLAN&quot;,\n        &quot;Static and dynamic copies always coexist&quot;,\n        &quot;It cannot; MACs are globally unique in the table&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;The MAC table is scoped per VLAN. A device reachable in two VLANs is learned once per VLAN, so the same MAC can hold separate rows under different VLAN IDs.&quot;,\n      &quot;validated&quot;: &quot;doc&quot;\n    },\n    {\n      &quot;q&quot;: &quot;In show interfaces status, a port reads &#039;connected a-half a-100&#039;. What does the a-half tell you?&quot;,\n      &quot;options&quot;: [\n        &quot;The port is administratively set to half duplex&quot;,\n        &quot;Autonegotiation defaulted to half duplex because the other side is hardcoded&quot;,\n        &quot;The cable is a half-length run&quot;,\n        &quot;The port is disabled&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;The a- prefix means the value was autonegotiated. a-half means the port could not learn the duplex from a hardcoded neighbor and fell back to half duplex per IEEE 802.3u. Paired with a full-duplex neighbor, that is a duplex mismatch.&quot;,\n      &quot;validated&quot;: &quot;doc&quot;\n    },\n    {\n      &quot;type&quot;: &quot;match&quot;,\n      &quot;q&quot;: &quot;Match each interface status to its meaning.&quot;,\n      &quot;pairs&quot;: [\n        {\n          &quot;left&quot;: &quot;administratively down \/ down&quot;,\n          &quot;right&quot;: &quot;Shut down in config (no shutdown to fix)&quot;\n        },\n        {\n          &quot;left&quot;: &quot;down \/ down (notconnect)&quot;,\n          &quot;right&quot;: &quot;No working link&quot;\n        },\n        {\n          &quot;left&quot;: &quot;up \/ up&quot;,\n          &quot;right&quot;: &quot;The interface is working&quot;\n        },\n        {\n          &quot;left&quot;: &quot;down \/ down (err-disabled)&quot;,\n          &quot;right&quot;: &quot;A feature shut the port&quot;\n        }\n      ],\n      &quot;explanation&quot;: &quot;The two-part status maps to a cause: admin-down means it was shut in config, notconnect means no working link, up\/up is healthy, and err-disabled means a feature like port security or BPDU guard disabled the port.&quot;,\n      &quot;validated&quot;: &quot;doc&quot;\n    },\n    {\n      &quot;q&quot;: &quot;Which three channels are non-overlapping in the 2.4 GHz band?&quot;,\n      &quot;options&quot;: [\n        &quot;1, 5, 11&quot;,\n        &quot;1, 6, 11&quot;,\n        &quot;2, 7, 12&quot;,\n        &quot;1, 6, 13&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;In 2.4 GHz each channel is ~22 MHz wide but channels are spaced only 5 MHz apart, so only channels 1, 6, and 11 avoid overlap. Any other choice bleeds into a clean channel.&quot;,\n      &quot;validated&quot;: &quot;doc&quot;\n    },\n    {\n      &quot;q&quot;: &quot;Which Wi-Fi security mode uses a RADIUS server to authenticate each user with 802.1X and EAP?&quot;,\n      &quot;options&quot;: [\n        &quot;Personal (PSK)&quot;,\n        &quot;Enterprise&quot;,\n        &quot;Open&quot;,\n        &quot;WEP shared key&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;Enterprise mode hands authentication to a RADIUS server. The AP relays EAP to RADIUS and blocks traffic until the server approves, giving each user a unique session key. Personal mode uses a single pre-shared key with no server.&quot;,\n      &quot;validated&quot;: &quot;doc&quot;\n    },\n    {\n      &quot;q&quot;: &quot;What is the maximum distance of a 1000BASE-T link over UTP copper?&quot;,\n      &quot;options&quot;: [\n        &quot;55 m&quot;,\n        &quot;100 m&quot;,\n        &quot;550 m&quot;,\n        &quot;5 km&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;Every copper BASE-T standard, from 10BASE-T to 10GBASE-T, is capped at 100 metres per link. The limit is electrical, so no UTP category exceeds it.&quot;,\n      &quot;validated&quot;: &quot;doc&quot;\n    },\n    {\n      &quot;q&quot;: &quot;Which UTP category is required to run 10 Gigabit Ethernet to the full 100 metres?&quot;,\n      &quot;options&quot;: [\n        &quot;Cat 5&quot;,\n        &quot;Cat 5e&quot;,\n        &quot;Cat 6&quot;,\n        &quot;Cat 6a&quot;\n      ],\n      &quot;answer&quot;: 3,\n      &quot;explanation&quot;: &quot;Cat 6a supports 10 Gbps over the full 100 m. Cat 6 manages 10 Gbps only to about 55 m; Cat 5e tops out at 1 Gbps.&quot;,\n      &quot;validated&quot;: &quot;doc&quot;\n    },\n    {\n      &quot;q&quot;: &quot;How much power does a PD receive on an 802.3af (PoE) link?&quot;,\n      &quot;options&quot;: [\n        &quot;7 W&quot;,\n        &quot;12.95 W&quot;,\n        &quot;25.5 W&quot;,\n        &quot;30 W&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;802.3af supplies 15.4 W at the PSE, but cable loss means the PD receives 12.95 W. The 15.4 W figure is what the switch port sources.&quot;,\n      &quot;validated&quot;: &quot;doc&quot;\n    },\n    {\n      &quot;q&quot;: &quot;A 48-port switch has a 370 W PoE budget. Roughly how many full 30 W PoE+ devices can it power?&quot;,\n      &quot;options&quot;: [\n        &quot;48&quot;,\n        &quot;About 12&quot;,\n        &quot;30&quot;,\n        &quot;24&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;PoE capacity is the power budget, not the port count. 370 W divided by 30 W is about 12 devices. The thirteenth would show Oper: off in show power inline.&quot;,\n      &quot;validated&quot;: &quot;doc&quot;\n    },\n    {\n      &quot;q&quot;: &quot;A Windows machine shows an IPv4 address of 169.254.14.32. What does this tell you?&quot;,\n      &quot;options&quot;: [\n        &quot;It has a static IP&quot;,\n        &quot;DHCP failed and the host self-assigned an APIPA link-local address&quot;,\n        &quot;It is on a different subnet&quot;,\n        &quot;DNS is misconfigured&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;169.254.0.0\/16 is APIPA. When a client gets no DHCP reply it self-assigns a link-local address in this range. It can reach other hosts on the same wire but not the gateway or the internet. Fix the DHCP server, the switchport VLAN, or the link.&quot;,\n      &quot;validated&quot;: &quot;doc&quot;\n    },\n    {\n      &quot;q&quot;: &quot;Which single macOS command prints the IP, subnet mask, router, and a clean summary for a named interface?&quot;,\n      &quot;options&quot;: [\n        &quot;scutil --dns&quot;,\n        &quot;ifconfig en0&quot;,\n        &quot;networksetup -getinfo \\&quot;Wi-Fi\\&quot;&quot;,\n        &quot;ip addr&quot;\n      ],\n      &quot;answer&quot;: 2,\n      &quot;explanation&quot;: &quot;networksetup -getinfo \\&quot;Wi-Fi\\&quot; (or \\&quot;Ethernet\\&quot;) prints the address, mask, and router in one clean block. Use networksetup -listallnetworkservices to find the service name first.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;q&quot;: &quot;What is the difference between a Type 1 and a Type 2 hypervisor?&quot;,\n      &quot;options&quot;: [\n        &quot;Type 1 is open source; Type 2 is commercial&quot;,\n        &quot;Type 1 runs directly on the hardware; Type 2 runs on top of a host OS&quot;,\n        &quot;Type 1 runs containers; Type 2 runs VMs&quot;,\n        &quot;There is no difference&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;Type 1 (bare-metal, e.g. ESXi, Hyper-V, KVM) runs directly on the hardware and is used in data centers. Type 2 (hosted, e.g. VirtualBox) runs on top of an existing host OS and is used on desktops.&quot;,\n      &quot;validated&quot;: &quot;doc&quot;\n    },\n    {\n      &quot;q&quot;: &quot;On a router where every interface is assigned to a VRF, what does the plain show ip route (global table) display?&quot;,\n      &quot;options&quot;: [\n        &quot;All the VRF routes combined&quot;,\n        &quot;Nothing for those interfaces; the routes live in the VRF tables&quot;,\n        &quot;Only the default route&quot;,\n        &quot;An error&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;Interfaces placed in a VRF leave the global table. In the lab, show ip route shows no 10.10.10.0\/24 at all, because both copies live in the RED and BLUE VRF tables, viewed with show ip route vrf RED and show ip route vrf BLUE.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;q&quot;: &quot;Which prompt indicates privileged EXEC mode?&quot;,\n      &quot;options&quot;: [\n        &quot;Router&gt;&quot;,\n        &quot;Router#&quot;,\n        &quot;Router(config)#&quot;,\n        &quot;Router(config-if)#&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;Router&gt; is user EXEC, Router# is privileged EXEC (reached with enable), and Router(config)# is global configuration mode. The hash sign is the privileged EXEC marker.&quot;,\n      &quot;validated&quot;: &quot;doc&quot;\n    }\n  ]\n}\" data-quiz-count=\"30\"><div class=\"cfg-quiz-loading\">Loading quiz...<\/div><\/div>\n<p>Once you can clear this consistently, you have a solid grip on Network Fundamentals. Use the topic list below to shore up anything that tripped you, then move on to the other domains.<\/p>\n<h2>What Domain 1 covers<\/h2>\n<p>Every sub-topic in this practice test has a full hands-on guide. Work through any that the test exposed as weak:<\/p>\n<p><strong>Addressing and subnetting<\/strong> carry the most weight. Start with <a href=\"https:\/\/computingforgeeks.com\/ipv4-addressing-explained\/\">IPv4 addressing<\/a> and <a href=\"https:\/\/computingforgeeks.com\/ipv6-addressing-explained\/\">IPv6 addressing<\/a>, then drill the math with <a href=\"https:\/\/computingforgeeks.com\/subnetting-by-network-requirements\/\">subnetting by host requirements<\/a> and <a href=\"https:\/\/computingforgeeks.com\/subnetting-vlsm-explained\/\">VLSM<\/a>.<\/p>\n<p><strong>The models and transport:<\/strong> the <a href=\"https:\/\/computingforgeeks.com\/osi-tcp-ip-model-explained\/\">OSI and TCP\/IP models<\/a> frame everything else, and <a href=\"https:\/\/computingforgeeks.com\/tcp-vs-udp-explained-wireshark\/\">TCP versus UDP<\/a> covers how data actually moves.<\/p>\n<p><strong>Switching and devices:<\/strong> see how <a href=\"https:\/\/computingforgeeks.com\/how-switches-work-mac-address-table\/\">switches build the MAC address table<\/a>, the roles of <a href=\"https:\/\/computingforgeeks.com\/network-devices-routers-switches-firewalls-explained\/\">routers, switches, and firewalls<\/a>, and the <a href=\"https:\/\/computingforgeeks.com\/network-architectures-explained\/\">network architectures<\/a> they form.<\/p>\n<p><strong>The physical layer:<\/strong> <a href=\"https:\/\/computingforgeeks.com\/copper-vs-fiber-network-cabling\/\">copper versus fiber cabling<\/a>, <a href=\"https:\/\/computingforgeeks.com\/power-over-ethernet-poe-explained\/\">Power over Ethernet<\/a>, and <a href=\"https:\/\/computingforgeeks.com\/wireless-networking-fundamentals\/\">wireless fundamentals<\/a>.<\/p>\n<p><strong>Hosts, virtualization, and the CLI:<\/strong> <a href=\"https:\/\/computingforgeeks.com\/verify-ip-settings-windows-mac-linux\/\">verifying IP settings on Windows, macOS, and Linux<\/a>, <a href=\"https:\/\/computingforgeeks.com\/virtualization-fundamentals-vms-containers-vrf\/\">virtualization with VMs, containers, and VRFs<\/a>, <a href=\"https:\/\/computingforgeeks.com\/cisco-interface-troubleshooting-show-interfaces\/\">reading interface status and counters<\/a>, and the <a href=\"https:\/\/computingforgeeks.com\/ccna-routers-and-catalyst-switch-ios-cli-editing-commands\/\">IOS CLI navigation shortcuts<\/a>.<\/p>\n<h2>Where to go after Domain 1<\/h2>\n<p>Network Fundamentals is the foundation the other five domains build on, so it is worth getting solid here first. When you can pass this test comfortably, the <a href=\"https:\/\/computingforgeeks.com\/quickly-prepare-for-ccna-200-301-exam\/\">CCNA 200-301 study roadmap<\/a> lays out the full path through Network Access, IP Connectivity, IP Services, Security Fundamentals, and Automation, with the same mix of hands-on guides, real Cisco output, and practice questions for each.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Domain 1, Network Fundamentals, is a 20 percent block of the CCNA 200-301 exam and the foundation the other five domains build on, so it is where most candidates either build momentum or lose easy points. This practice test pulls questions from across the whole domain so you can find the weak spots before exam &#8230; <a title=\"CCNA 200-301 Domain 1 Practice Test: Network Fundamentals\" class=\"read-more\" href=\"https:\/\/computingforgeeks.com\/ccna-domain-1-practice-test\/\" aria-label=\"Read more about CCNA 200-301 Domain 1 Practice Test: Network Fundamentals\">Read more<\/a><\/p>\n","protected":false},"author":3,"featured_media":169243,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[55],"tags":[524,525],"cfg_series":[39888],"class_list":["post-169244","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-networking","tag-ccna","tag-cisco","cfg_series-ccna-200-301"],"_links":{"self":[{"href":"https:\/\/computingforgeeks.com\/wp-json\/wp\/v2\/posts\/169244","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/computingforgeeks.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/computingforgeeks.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/computingforgeeks.com\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/computingforgeeks.com\/wp-json\/wp\/v2\/comments?post=169244"}],"version-history":[{"count":1,"href":"https:\/\/computingforgeeks.com\/wp-json\/wp\/v2\/posts\/169244\/revisions"}],"predecessor-version":[{"id":169245,"href":"https:\/\/computingforgeeks.com\/wp-json\/wp\/v2\/posts\/169244\/revisions\/169245"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/computingforgeeks.com\/wp-json\/wp\/v2\/media\/169243"}],"wp:attachment":[{"href":"https:\/\/computingforgeeks.com\/wp-json\/wp\/v2\/media?parent=169244"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/computingforgeeks.com\/wp-json\/wp\/v2\/categories?post=169244"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/computingforgeeks.com\/wp-json\/wp\/v2\/tags?post=169244"},{"taxonomy":"cfg_series","embeddable":true,"href":"https:\/\/computingforgeeks.com\/wp-json\/wp\/v2\/cfg_series?post=169244"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}