{"id":169430,"date":"2026-06-22T11:50:52","date_gmt":"2026-06-22T08:50:52","guid":{"rendered":"https:\/\/computingforgeeks.com\/?p=169430"},"modified":"2026-06-22T11:50:52","modified_gmt":"2026-06-22T08:50:52","slug":"ccna-domain-3-practice-test","status":"publish","type":"post","link":"https:\/\/computingforgeeks.com\/ccna-domain-3-practice-test\/","title":{"rendered":"CCNA 200-301 Domain 3 Practice Test: IP Connectivity"},"content":{"rendered":"<p>Domain 3 is the one that decides your result. IP Connectivity is a 25 percent block of the Cisco CCNA 200-301 exam, the single largest domain on it, and it is where most of the simulation and configuration questions live. If you are going to be strong anywhere, be strong here. This practice test pulls from every IP Connectivity topic at once so you find the weak spots while there is still time to close them.<\/p>\n\n<p>The questions are the same validated items from the per-topic quizzes across this series, weighted to match how heavy IP Connectivity is on the real exam. Every one was reproduced in a GNS3 lab on Cisco IOS 15.2 or checked against Cisco documentation, every answer carries a written explanation, and the test draws a fresh thirty-question mix from a ninety-one-question bank each time you retake it.<\/p>\n\n<p><em>Current as of June 2026, matched to the live CCNA 200-301 (v1.1) IP Connectivity exam topics.<\/em><\/p>\n\n<h2>How to use this practice test<\/h2>\n\n<p>Run the whole set without notes, then read the explanation on every question, including the ones you guessed correctly. A practice test only earns its keep by sending you back to the topics you are shaky on. When a question exposes a gap, open the matching guide in the list below, work the lab in it, then retake the test for a new draw.<\/p>\n\n<p>Hold yourself to a higher bar here than on the lighter domains. Anything under about 90 percent on IP Connectivity is a real risk on exam day, because this is where the sim questions hit hardest. Static routes and OSPF behavior account for most of the misses, usually a small detail rather than the big idea: an administrative distance that picks the wrong path, a floating route that never installs, a neighbor that reaches FULL but still does not advertise a subnet.<\/p>\n\n<h2>Take the Domain 3 practice test<\/h2>\n\n<p>Thirty questions, drawn at random from the full ninety-one-question IP Connectivity bank and re-sampled on every retake:<\/p>\n\n<div class=\"cfg-quiz\" data-quiz=\"{\n  &quot;id&quot;: &quot;ccna-domain3&quot;,\n  &quot;title&quot;: &quot;CCNA 200-301 Domain 3: IP Connectivity practice test&quot;,\n  &quot;objective&quot;: &quot;IP Connectivity (25%): routing table, packet forwarding, static + OSPF routing, inter-VLAN routing, FHRP, and IP connectivity troubleshooting&quot;,\n  &quot;intro&quot;: &quot;Deep practice across all of Domain 3, the largest block on the CCNA. Every item was reproduced in a GNS3 lab on Cisco IOS 15.2 or checked against Cisco documentation. A fresh thirty-question mix is drawn on each retake.&quot;,\n  &quot;questions&quot;: [\n    {\n      &quot;type&quot;: &quot;match&quot;,\n      &quot;q&quot;: &quot;Match each show ip route code to its source.&quot;,\n      &quot;pairs&quot;: [\n        {\n          &quot;left&quot;: &quot;C&quot;,\n          &quot;right&quot;: &quot;Directly connected network&quot;\n        },\n        {\n          &quot;left&quot;: &quot;L&quot;,\n          &quot;right&quot;: &quot;Local (the \/32 for the router&#039;s own interface IP)&quot;\n        },\n        {\n          &quot;left&quot;: &quot;O&quot;,\n          &quot;right&quot;: &quot;Learned from OSPF&quot;\n        },\n        {\n          &quot;left&quot;: &quot;S&quot;,\n          &quot;right&quot;: &quot;Static route you configured&quot;\n        }\n      ],\n      &quot;explanation&quot;: &quot;C is a connected subnet, L is the \/32 host route for the interface address, O is an OSPF-learned route, and S is a static route. The codes legend prints at the top of show ip route.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;q&quot;: &quot;What does administrative distance rank?&quot;,\n      &quot;options&quot;: [\n        &quot;The speed of a link&quot;,\n        &quot;The trustworthiness of a route&#039;s SOURCE when two sources offer the same prefix&quot;,\n        &quot;The number of hops to a network&quot;,\n        &quot;The size of the routing table&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;Administrative distance ranks how trustworthy a route source is. When two protocols (or a protocol and a static) offer the same prefix, the router installs the one with the lowest AD.&quot;,\n      &quot;validated&quot;: &quot;doc&quot;\n    },\n    {\n      &quot;type&quot;: &quot;numeric&quot;,\n      &quot;q&quot;: &quot;What is the default administrative distance of OSPF? Type the number.&quot;,\n      &quot;answer&quot;: &quot;110&quot;,\n      &quot;hint&quot;: &quot;RIP is 120.&quot;,\n      &quot;placeholder&quot;: &quot;e.g. 90&quot;,\n      &quot;explanation&quot;: &quot;OSPF has a default AD of 110. For reference: connected 0, static 1, eBGP 20, EIGRP 90, OSPF 110, RIP 120, internal BGP 200.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;type&quot;: &quot;numeric&quot;,\n      &quot;q&quot;: &quot;What is the default administrative distance of a static route? Type the number.&quot;,\n      &quot;answer&quot;: &quot;1&quot;,\n      &quot;hint&quot;: &quot;Just above directly connected (0).&quot;,\n      &quot;placeholder&quot;: &quot;e.g. 0&quot;,\n      &quot;explanation&quot;: &quot;A static route has an AD of 1, just above a directly connected route (0). That is why a static route is preferred over OSPF (110) or RIP (120) for the same prefix.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;q&quot;: &quot;In the route O 192.168.20.0\/24 [110\/2], what do 110 and 2 mean?&quot;,\n      &quot;options&quot;: [\n        &quot;110 is the metric, 2 is the AD&quot;,\n        &quot;110 is the administrative distance, 2 is the metric&quot;,\n        &quot;110 is the VLAN, 2 is the hop count&quot;,\n        &quot;110 and 2 are both port numbers&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;The bracket is [administrative distance \/ metric]. So 110 is the AD (OSPF) and 2 is the OSPF metric (cost) for this route.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;q&quot;: &quot;When forwarding a packet, how does a router choose which route to use?&quot;,\n      &quot;options&quot;: [\n        &quot;The route with the lowest administrative distance&quot;,\n        &quot;The route with the lowest metric&quot;,\n        &quot;The most specific matching route (longest-prefix match)&quot;,\n        &quot;The first route in the table&quot;\n      ],\n      &quot;answer&quot;: 2,\n      &quot;explanation&quot;: &quot;Forwarding uses longest-prefix match: the router picks the most specific route that matches the destination, regardless of AD or metric. AD and metric only break ties between routes to the SAME prefix.&quot;,\n      &quot;validated&quot;: &quot;doc&quot;\n    },\n    {\n      &quot;q&quot;: &quot;What is the gateway of last resort?&quot;,\n      &quot;options&quot;: [\n        &quot;The default route (0.0.0.0\/0), used when no more-specific route matches&quot;,\n        &quot;The closest connected router&quot;,\n        &quot;The route with the highest metric&quot;,\n        &quot;The management interface&quot;\n      ],\n      &quot;answer&quot;: 0,\n      &quot;explanation&quot;: &quot;The gateway of last resort is the default route, 0.0.0.0\/0, shown with an S* code and a &#039;Gateway of last resort is...&#039; header. The router uses it only when nothing more specific matches.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;q&quot;: &quot;What is the difference between a C route and an L route?&quot;,\n      &quot;options&quot;: [\n        &quot;They are identical&quot;,\n        &quot;C is the connected subnet; L is the \/32 host route for the router&#039;s own interface address&quot;,\n        &quot;C is for copper, L is for fiber&quot;,\n        &quot;C is configured, L is learned&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;An up\/up interface with an IP creates a C route for its subnet and an L route, a \/32, for the interface&#039;s own address. Both point at the same interface.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;q&quot;: &quot;OSPF and a static route both offer 10.0.0.0\/8. Which does the router install?&quot;,\n      &quot;options&quot;: [\n        &quot;OSPF, because it is dynamic&quot;,\n        &quot;The static route, because its AD (1) is lower than OSPF (110)&quot;,\n        &quot;Both, load-balanced&quot;,\n        &quot;Neither, it is a conflict&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;Same prefix from two sources is decided by administrative distance: the static route&#039;s AD of 1 beats OSPF&#039;s 110, so the static route is installed.&quot;,\n      &quot;validated&quot;: &quot;doc&quot;\n    },\n    {\n      &quot;q&quot;: &quot;Two OSPF routes reach the same prefix. Which one wins?&quot;,\n      &quot;options&quot;: [\n        &quot;The one with the lower administrative distance&quot;,\n        &quot;The one with the lower metric (cost)&quot;,\n        &quot;The one learned first&quot;,\n        &quot;Both are installed and the AD is summed&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;When two routes to the same prefix come from the SAME protocol, AD is equal, so the lower metric wins. For OSPF that is the lower cost.&quot;,\n      &quot;validated&quot;: &quot;doc&quot;\n    },\n    {\n      &quot;q&quot;: &quot;Which part of the router builds the routing table, and which part forwards packets?&quot;,\n      &quot;options&quot;: [\n        &quot;The data plane builds the table; the control plane forwards&quot;,\n        &quot;The control plane builds the table (RIB); the data plane forwards using the FIB&quot;,\n        &quot;Both are the same process&quot;,\n        &quot;The CPU forwards every packet individually&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;The control plane runs routing protocols and builds the routing table (RIB). The data plane moves packets as fast as possible. CEF builds a forwarding table (FIB) from the RIB so the data plane never has to wait on the control plane.&quot;,\n      &quot;validated&quot;: &quot;doc&quot;\n    },\n    {\n      &quot;q&quot;: &quot;Which command shows the FIB (the forwarding table CEF builds), as opposed to the routing table?&quot;,\n      &quot;options&quot;: [\n        &quot;show ip route&quot;,\n        &quot;show ip cef&quot;,\n        &quot;show ip protocols&quot;,\n        &quot;show running-config&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;show ip route is the RIB (the routing table). show ip cef is the FIB: one pre-resolved entry per prefix with the next hop and exit interface already worked out. The data plane forwards from the FIB.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;type&quot;: &quot;match&quot;,\n      &quot;q&quot;: &quot;Match each show ip cef entry to what it means.&quot;,\n      &quot;pairs&quot;: [\n        {\n          &quot;left&quot;: &quot;receive&quot;,\n          &quot;right&quot;: &quot;Destined to the router itself (its own IPs)&quot;\n        },\n        {\n          &quot;left&quot;: &quot;attached&quot;,\n          &quot;right&quot;: &quot;A directly connected network&quot;\n        },\n        {\n          &quot;left&quot;: &quot;10.0.12.2  Gi0\/0&quot;,\n          &quot;right&quot;: &quot;Forward toward this next hop and interface&quot;\n        },\n        {\n          &quot;left&quot;: &quot;drop&quot;,\n          &quot;right&quot;: &quot;Reserved or martian range, discarded&quot;\n        }\n      ],\n      &quot;explanation&quot;: &quot;In show ip cef, receive entries are the router&#039;s own addresses (punted to the control plane), attached entries are directly connected networks, a next-hop IP plus interface is a route to forward toward, and drop entries are martians\/reserved ranges like 127.0.0.0\/8 and 224.0.0.0\/4.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;q&quot;: &quot;What does the adjacency table (show adjacency detail) hold for each next hop?&quot;,\n      &quot;options&quot;: [\n        &quot;The full routing table&quot;,\n        &quot;The complete Layer 2 frame header to push: destination MAC, source MAC, and EtherType&quot;,\n        &quot;The OSPF cost&quot;,\n        &quot;A list of VLANs&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;The adjacency table holds the Layer 2 rewrite for each next hop: the destination MAC (the next hop), the source MAC (the router&#039;s exit interface), and the EtherType. For Ethernet next hops it is resolved from ARP.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;type&quot;: &quot;numeric&quot;,\n      &quot;q&quot;: &quot;The adjacency shows &#039;Encap length 14&#039;. How many bytes is that Ethernet rewrite header?&quot;,\n      &quot;answer&quot;: &quot;14&quot;,\n      &quot;hint&quot;: &quot;6 + 6 + 2.&quot;,\n      &quot;placeholder&quot;: &quot;e.g. 18&quot;,\n      &quot;explanation&quot;: &quot;An Ethernet header is 14 bytes: 6 for the destination MAC, 6 for the source MAC, and 2 for the EtherType (0800 for IPv4). The rewrite string CA0220620008CA01204600080800 is exactly those 14 bytes.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;q&quot;: &quot;As a router forwards a packet to the next hop, what does it rewrite?&quot;,\n      &quot;options&quot;: [\n        &quot;The source and destination IP addresses&quot;,\n        &quot;The Layer 2 header: a new source MAC (its exit interface) and destination MAC (the next hop)&quot;,\n        &quot;Nothing, it forwards the frame unchanged&quot;,\n        &quot;The TCP port numbers&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;At each hop the router rewrites the Layer 2 header (new source MAC = its exit interface, new destination MAC = the next hop). The Layer 3 source and destination IPs stay the same (NAT aside). That is the core of routing.&quot;,\n      &quot;validated&quot;: &quot;doc&quot;\n    },\n    {\n      &quot;q&quot;: &quot;What does a router do to the IP TTL at every hop?&quot;,\n      &quot;options&quot;: [\n        &quot;Increases it by one&quot;,\n        &quot;Leaves it unchanged&quot;,\n        &quot;Decrements it by one; at zero it drops the packet and returns ICMP time-exceeded&quot;,\n        &quot;Sets it to 255&quot;\n      ],\n      &quot;answer&quot;: 2,\n      &quot;explanation&quot;: &quot;Each router decrements the TTL by one and recomputes the header checksum. When the TTL reaches zero the packet is dropped and an ICMP time-exceeded is sent back. That behavior is what makes traceroute work.&quot;,\n      &quot;validated&quot;: &quot;doc&quot;\n    },\n    {\n      &quot;q&quot;: &quot;A packet is destined to 192.168.20.55. The FIB has 192.168.20.0\/24 via 10.0.12.2 and 0.0.0.0\/0. Which entry forwards it?&quot;,\n      &quot;options&quot;: [\n        &quot;0.0.0.0\/0, because it matches everything&quot;,\n        &quot;192.168.20.0\/24, because it is the most specific (longest-prefix) match&quot;,\n        &quot;Neither, the host is not listed&quot;,\n        &quot;Both, load-balanced&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;Forwarding uses longest-prefix match: the most specific matching entry wins. 192.168.20.0\/24 is more specific than the default route, so it forwards the packet; the default is used only when nothing more specific matches.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;q&quot;: &quot;A static route points at a next-hop IP (not an exit interface). What does the router need to forward toward it?&quot;,\n      &quot;options&quot;: [\n        &quot;Nothing extra&quot;,\n        &quot;A recursive lookup to find the route to that next hop and its exit interface&quot;,\n        &quot;A second static route for every host&quot;,\n        &quot;STP to converge first&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;A static route to a next-hop IP needs a recursive lookup: find the route to the next hop, then use its exit interface. CEF resolves the recursion once, in advance, and stores the final next-hop and interface in the FIB.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;q&quot;: &quot;On a modern Cisco router, how is CEF switching used compared with process switching?&quot;,\n      &quot;options&quot;: [\n        &quot;Process switching is the default and faster&quot;,\n        &quot;CEF is enabled by default; it forwards from a pre-built FIB, keeping the CPU out of the per-packet path&quot;,\n        &quot;You must enable CEF for every interface manually&quot;,\n        &quot;CEF only works for IPv6&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;CEF is on by default. It pre-builds the complete FIB and adjacency table, so even the first packet is forwarded fast and the CPU is not in the per-packet path. Process switching (the CPU examining each packet) is the slow fallback CEF replaces.&quot;,\n      &quot;validated&quot;: &quot;doc&quot;\n    },\n    {\n      &quot;q&quot;: &quot;What does ip route 192.168.2.0 255.255.255.0 10.0.12.2 do?&quot;,\n      &quot;options&quot;: [\n        &quot;Adds 10.0.12.2 as a DNS server&quot;,\n        &quot;Creates a static route to 192.168.2.0\/24 with next hop 10.0.12.2&quot;,\n        &quot;Sets the router&#039;s own IP to 192.168.2.0&quot;,\n        &quot;Blocks traffic to 192.168.2.0\/24&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;It installs a static route to the 192.168.2.0\/24 network reachable via next hop 10.0.12.2. The router does a recursive lookup to find how to reach 10.0.12.2.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;type&quot;: &quot;numeric&quot;,\n      &quot;q&quot;: &quot;The default route 0.0.0.0 0.0.0.0 matches every destination. What is its prefix length? Type the number.&quot;,\n      &quot;answer&quot;: &quot;0&quot;,\n      &quot;hint&quot;: &quot;A 0.0.0.0 mask = how many network bits?&quot;,\n      &quot;placeholder&quot;: &quot;e.g. 24&quot;,\n      &quot;explanation&quot;: &quot;A mask of 0.0.0.0 is a \/0, so the default route is 0.0.0.0\/0. Because it is the least specific possible match, longest-prefix match uses it only when nothing more specific matches.&quot;,\n      &quot;validated&quot;: &quot;doc&quot;\n    },\n    {\n      &quot;q&quot;: &quot;What is a floating static route?&quot;,\n      &quot;options&quot;: [\n        &quot;A static route that load-balances&quot;,\n        &quot;A backup static route with a manually raised administrative distance, so it installs only when the primary fails&quot;,\n        &quot;A route that changes its next hop automatically&quot;,\n        &quot;A default route&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;A floating static route is a static route configured with a higher AD (for example 200) than the primary path. While the primary is up it stays out of the routing table; it installs only when the primary route is withdrawn.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;q&quot;: &quot;You configure ip route 192.168.2.0 255.255.255.0 10.0.13.2 200 as a backup, but it does not appear in show ip route. Why?&quot;,\n      &quot;options&quot;: [\n        &quot;The syntax is wrong&quot;,\n        &quot;Its AD (200) is higher than the primary route&#039;s AD (1), so the primary wins and the floating route stays out until the primary fails&quot;,\n        &quot;Floating routes are never shown&quot;,\n        &quot;The next hop is unreachable&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;That is the floating static working as designed. With AD 200 it loses to the primary static (AD 1), so it is not installed. When the primary is withdrawn, the floating route installs and show ip route shows it at [200\/0].&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;type&quot;: &quot;match&quot;,\n      &quot;q&quot;: &quot;Match each static route form to its command.&quot;,\n      &quot;pairs&quot;: [\n        {\n          &quot;left&quot;: &quot;Next-hop&quot;,\n          &quot;right&quot;: &quot;ip route 192.168.2.0 255.255.255.0 10.0.12.2&quot;\n        },\n        {\n          &quot;left&quot;: &quot;Exit-interface&quot;,\n          &quot;right&quot;: &quot;ip route 192.168.2.0 255.255.255.0 Gi0\/0&quot;\n        },\n        {\n          &quot;left&quot;: &quot;Fully-specified&quot;,\n          &quot;right&quot;: &quot;ip route 192.168.2.0 255.255.255.0 Gi0\/0 10.0.12.2&quot;\n        },\n        {\n          &quot;left&quot;: &quot;Default&quot;,\n          &quot;right&quot;: &quot;ip route 0.0.0.0 0.0.0.0 10.0.12.2&quot;\n        }\n      ],\n      &quot;explanation&quot;: &quot;Next-hop names only the next-hop IP, exit-interface names only the outgoing interface, fully-specified names both, and the default route uses the 0.0.0.0 0.0.0.0 network and mask.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;q&quot;: &quot;Why is a fully-specified static route preferred over an exit-interface-only route on a multi-access Ethernet link?&quot;,\n      &quot;options&quot;: [\n        &quot;It is shorter to type&quot;,\n        &quot;An exit-interface-only route on Ethernet relies on proxy ARP for every destination host; naming the next hop avoids that&quot;,\n        &quot;Exit-interface routes do not work at all&quot;,\n        &quot;It lowers the administrative distance&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;On a multi-access (Ethernet) link, an exit-interface-only static makes the router treat every destination as directly connected and lean on proxy ARP. A fully-specified route (interface plus next hop) avoids that. Exit-interface-only is fine on true point-to-point links.&quot;,\n      &quot;validated&quot;: &quot;doc&quot;\n    },\n    {\n      &quot;q&quot;: &quot;Which command shows only the static routes in the table?&quot;,\n      &quot;options&quot;: [\n        &quot;show static&quot;,\n        &quot;show ip route static&quot;,\n        &quot;show ip static-route&quot;,\n        &quot;show running-config&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;show ip route static filters the routing table to static entries (including the S* default). show running-config | include ip route shows what is configured, including a floating route that is not currently installed.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;q&quot;: &quot;The primary link fails. What does show ip route 192.168.2.0 show afterward?&quot;,\n      &quot;options&quot;: [\n        &quot;Nothing, the network is unreachable&quot;,\n        &quot;The floating static at distance 200 via the backup next hop&quot;,\n        &quot;The primary route at distance 1&quot;,\n        &quot;An OSPF route&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;When the primary (AD 1) is withdrawn, the floating static installs. show ip route 192.168.2.0 then reports &#039;Known via static, distance 200&#039; via the backup next hop, and traffic fails over to it.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;q&quot;: &quot;What must you enable before a Cisco router will route IPv6 at all?&quot;,\n      &quot;options&quot;: [\n        &quot;ip routing&quot;,\n        &quot;ipv6 unicast-routing&quot;,\n        &quot;ipv6 enable&quot;,\n        &quot;ipv6 cef&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;ipv6 unicast-routing is off by default. Without it the router takes IPv6 addresses but does not forward IPv6 packets between interfaces. It is the first global command in any IPv6 routing setup.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;q&quot;: &quot;What is the correct command for an IPv6 static route to 2001:db8:2::\/64 via a global next hop?&quot;,\n      &quot;options&quot;: [\n        &quot;ip route 2001:db8:2::\/64 2001:db8:12::2&quot;,\n        &quot;ipv6 route 2001:db8:2::\/64 2001:db8:12::2&quot;,\n        &quot;route add 2001:db8:2::\/64 2001:db8:12::2&quot;,\n        &quot;ipv6 static 2001:db8:2::\/64 2001:db8:12::2&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;IPv6 static routes use ipv6 route &lt;prefix&gt;\/&lt;length&gt; &lt;next-hop&gt;. Note the prefix length is written with a slash (\/64), unlike the dotted mask in IPv4&#039;s ip route.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;q&quot;: &quot;Why is ipv6 route 2001:db8:2::\/64 FE80::2 rejected?&quot;,\n      &quot;options&quot;: [\n        &quot;FE80::2 is invalid&quot;,\n        &quot;A link-local next hop is ambiguous across interfaces, so you must also name the exit interface&quot;,\n        &quot;Static routes cannot use IPv6&quot;,\n        &quot;The prefix is wrong&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;A link-local address (FE80::\/10) is only unique on a single link, so the router cannot tell which interface to use. IOS returns &#039;Interface has to be specified for a link-local nexthop&#039;. The fix is the fully-specified form: ipv6 route 2001:db8:2::\/64 GigabitEthernet0\/0 FE80::2.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;type&quot;: &quot;numeric&quot;,\n      &quot;q&quot;: &quot;The IPv6 default route is ::\/0. What is its prefix length? Type the number.&quot;,\n      &quot;answer&quot;: &quot;0&quot;,\n      &quot;hint&quot;: &quot;It matches every IPv6 destination.&quot;,\n      &quot;placeholder&quot;: &quot;e.g. 64&quot;,\n      &quot;explanation&quot;: &quot;::\/0 is a prefix length of 0, the least specific match possible, so it is used only when no more-specific route matches. It is the IPv6 equivalent of 0.0.0.0\/0.&quot;,\n      &quot;validated&quot;: &quot;doc&quot;\n    },\n    {\n      &quot;q&quot;: &quot;In show ipv6 route, a local (L) route for an interface address appears with what prefix length?&quot;,\n      &quot;options&quot;: [\n        &quot;\/64&quot;,\n        &quot;\/32&quot;,\n        &quot;\/128&quot;,\n        &quot;\/24&quot;\n      ],\n      &quot;answer&quot;: 2,\n      &quot;explanation&quot;: &quot;IPv6 local routes are \/128 (a single host address), shown as L. That is the IPv6 counterpart of the IPv4 \/32 local route. Connected networks still show as C with their real prefix length.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;q&quot;: &quot;How do you configure an IPv6 floating static route?&quot;,\n      &quot;options&quot;: [\n        &quot;With a lower administrative distance than the primary&quot;,\n        &quot;With a higher administrative distance (for example 200) so it installs only when the primary fails&quot;,\n        &quot;With the keyword floating&quot;,\n        &quot;It is automatic&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;Same idea as IPv4: ipv6 route 2001:db8:2::\/64 GigabitEthernet1\/0 FE80::20 200 sets AD 200. While the primary (AD 1) is up the floating route waits; it installs when the primary is withdrawn.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;type&quot;: &quot;match&quot;,\n      &quot;q&quot;: &quot;Match each IPv6 static route to its form.&quot;,\n      &quot;pairs&quot;: [\n        {\n          &quot;left&quot;: &quot;Global next hop&quot;,\n          &quot;right&quot;: &quot;ipv6 route 2001:db8:2::\/64 2001:db8:12::2&quot;\n        },\n        {\n          &quot;left&quot;: &quot;Fully-specified (link-local)&quot;,\n          &quot;right&quot;: &quot;ipv6 route 2001:db8:2::\/64 Gi0\/0 FE80::2&quot;\n        },\n        {\n          &quot;left&quot;: &quot;Default route&quot;,\n          &quot;right&quot;: &quot;ipv6 route ::\/0 2001:db8:12::2&quot;\n        },\n        {\n          &quot;left&quot;: &quot;Floating backup&quot;,\n          &quot;right&quot;: &quot;ipv6 route 2001:db8:2::\/64 Gi1\/0 FE80::20 200&quot;\n        }\n      ],\n      &quot;explanation&quot;: &quot;A global next hop needs no interface; a link-local next hop must name the interface (fully-specified); the default is ::\/0; a floating backup adds a higher AD.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;q&quot;: &quot;Which command shows the IPv6 routing table?&quot;,\n      &quot;options&quot;: [\n        &quot;show ip route&quot;,\n        &quot;show ipv6 route&quot;,\n        &quot;show route ipv6&quot;,\n        &quot;show ipv6 forwarding&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;show ipv6 route is the IPv6 routing table, separate from the IPv4 show ip route. show ipv6 route static filters to static entries, and show ipv6 route &lt;prefix&gt; drills into one route.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;q&quot;: &quot;In show ipv6 route 2001:db8:2::\/64, what does the line &#039;Backup from \\&quot;static [200]\\&quot;&#039; tell you?&quot;,\n      &quot;options&quot;: [\n        &quot;The route is broken&quot;,\n        &quot;A floating static route (AD 200) is registered as a backup and will install if this primary fails&quot;,\n        &quot;The route was learned from a backup router&quot;,\n        &quot;200 packets were forwarded&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;IOS names the standby route in the detail view: a floating static at AD 200 is registered as the backup. It is not in the main table yet, but it takes over when the primary (AD 1) is withdrawn.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;q&quot;: &quot;What is the IPv6 default-route command toward next hop 2001:db8:12::2?&quot;,\n      &quot;options&quot;: [\n        &quot;ipv6 route default 2001:db8:12::2&quot;,\n        &quot;ipv6 route ::\/0 2001:db8:12::2&quot;,\n        &quot;ip route 0.0.0.0 0.0.0.0 2001:db8:12::2&quot;,\n        &quot;ipv6 default-gateway 2001:db8:12::2&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;The IPv6 default route is ipv6 route ::\/0 &lt;next-hop&gt;. (ipv6 default-gateway exists but only applies when the device itself is not routing IPv6, which is not the case once ipv6 unicast-routing is on.)&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;q&quot;: &quot;What does it mean that OSPF is a link-state protocol?&quot;,\n      &quot;options&quot;: [\n        &quot;Each router shares its whole routing table with neighbors at intervals&quot;,\n        &quot;Every router builds an identical map of the topology and independently runs the SPF (Dijkstra) algorithm to find best paths&quot;,\n        &quot;Routers only know about directly connected networks&quot;,\n        &quot;It floods packets to every interface&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;Link-state routers flood link-state advertisements so every router in an area builds the same link-state database, then each runs SPF independently to compute its own shortest paths. Distance-vector protocols like RIP instead pass their whole routing table around.&quot;,\n      &quot;validated&quot;: &quot;doc&quot;\n    },\n    {\n      &quot;q&quot;: &quot;Which OSPF mechanism discovers neighbors and keeps adjacencies alive?&quot;,\n      &quot;options&quot;: [\n        &quot;ARP&quot;,\n        &quot;The Hello protocol&quot;,\n        &quot;CDP&quot;,\n        &quot;DHCP&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;OSPF sends Hello packets to discover neighbors and maintain adjacencies. For two routers to become neighbors, parameters in the Hello (area ID, hello and dead timers, subnet\/mask, authentication) must match.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;q&quot;: &quot;On a broadcast (multi-access) network, what does OSPF elect to reduce adjacencies?&quot;,\n      &quot;options&quot;: [\n        &quot;A root bridge&quot;,\n        &quot;A designated router (DR) and a backup designated router (BDR)&quot;,\n        &quot;An active and standby gateway&quot;,\n        &quot;A root port&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;On a broadcast segment OSPF elects a DR and a BDR. Every other router (a DROTHER) forms a full adjacency only with the DR and BDR, which avoids a full mesh of adjacencies. Point-to-point links elect no DR\/BDR.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;q&quot;: &quot;How is the OSPF DR chosen on a segment?&quot;,\n      &quot;options&quot;: [\n        &quot;Lowest IP address wins&quot;,\n        &quot;Highest interface priority wins; a tie is broken by the highest router ID; priority 0 means never DR&quot;,\n        &quot;The first router to boot wins permanently&quot;,\n        &quot;Lowest router ID wins&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;The router with the highest OSPF interface priority becomes DR; if priorities tie (default is 1), the highest router ID wins. A priority of 0 makes a router ineligible. The election is also non-preemptive: a new higher-priority router does not take over an existing DR.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;type&quot;: &quot;match&quot;,\n      &quot;q&quot;: &quot;Match each OSPF role or value to what it does.&quot;,\n      &quot;pairs&quot;: [\n        {\n          &quot;left&quot;: &quot;DR&quot;,\n          &quot;right&quot;: &quot;Originates the network (Type 2) LSA for the segment&quot;\n        },\n        {\n          &quot;left&quot;: &quot;BDR&quot;,\n          &quot;right&quot;: &quot;Takes over if the DR fails&quot;\n        },\n        {\n          &quot;left&quot;: &quot;DROTHER&quot;,\n          &quot;right&quot;: &quot;Forms a full adjacency only with the DR and BDR&quot;\n        },\n        {\n          &quot;left&quot;: &quot;Priority 0&quot;,\n          &quot;right&quot;: &quot;Router never becomes DR or BDR&quot;\n        }\n      ],\n      &quot;explanation&quot;: &quot;The DR represents the segment and originates its network LSA; the BDR is the standby; DROTHERs stay full only with the DR and BDR (and 2-way with each other); priority 0 removes a router from the election.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;type&quot;: &quot;numeric&quot;,\n      &quot;q&quot;: &quot;What is the default OSPF Hello interval on a broadcast network? Type the number of seconds.&quot;,\n      &quot;answer&quot;: &quot;10&quot;,\n      &quot;hint&quot;: &quot;The dead interval is four times this.&quot;,\n      &quot;placeholder&quot;: &quot;e.g. 30&quot;,\n      &quot;explanation&quot;: &quot;On broadcast and point-to-point links the default Hello is 10 seconds and the dead interval is 40 seconds (4x Hello). Both must match between neighbors or the adjacency never forms.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;q&quot;: &quot;How does a router choose its OSPF router ID?&quot;,\n      &quot;options&quot;: [\n        &quot;Always the lowest interface IP&quot;,\n        &quot;A manually configured router-id, else the highest loopback IP, else the highest active physical interface IP&quot;,\n        &quot;The MAC address of the first interface&quot;,\n        &quot;It is assigned by the DR&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;OSPF picks the router ID in this order: an explicit router-id command, then the highest IP on an up loopback, then the highest IP on an up physical interface. A loopback is preferred because it never goes down.&quot;,\n      &quot;validated&quot;: &quot;doc&quot;\n    },\n    {\n      &quot;q&quot;: &quot;How is OSPF cost calculated by default?&quot;,\n      &quot;options&quot;: [\n        &quot;Hop count&quot;,\n        &quot;Reference bandwidth divided by interface bandwidth (default reference 100 Mbps), minimum 1&quot;,\n        &quot;Delay plus bandwidth&quot;,\n        &quot;Always 1 for every link&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;OSPF cost = reference bandwidth \/ interface bandwidth, with a default reference of 100 Mbps and a minimum cost of 1. So 100M and faster links all come out as cost 1 unless you raise the reference bandwidth.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;q&quot;: &quot;On a broadcast segment, which router originates the network (Type 2) LSA?&quot;,\n      &quot;options&quot;: [\n        &quot;Every router&quot;,\n        &quot;The DR&quot;,\n        &quot;The BDR&quot;,\n        &quot;The DROTHER with the lowest IP&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;The DR originates the network LSA that represents the multi-access segment. In show ip ospf database the Net Link State&#039;s ADV Router is the DR&#039;s router ID, and its Link ID is the DR&#039;s interface address.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;q&quot;: &quot;In the command &lt;code&gt;router ospf 1&lt;\/code&gt;, what is the &lt;code&gt;1&lt;\/code&gt;?&quot;,\n      &quot;options&quot;: [\n        &quot;The OSPF area number&quot;,\n        &quot;A process ID that is locally significant and need not match other routers&quot;,\n        &quot;The router ID&quot;,\n        &quot;The administrative distance&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;The number after &lt;code&gt;router ospf&lt;\/code&gt; is a process ID. It is locally significant, so R1 can run process 1 and R2 process 50 and they still form an adjacency. What must match is the area, timers, subnet, and authentication, not the process ID.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;q&quot;: &quot;Which command advertises the network 10.0.12.0\/30 into OSPF area 0 using the network-statement method?&quot;,\n      &quot;options&quot;: [\n        &quot;network 10.0.12.0 255.255.255.252 area 0&quot;,\n        &quot;network 10.0.12.0 0.0.0.3 area 0&quot;,\n        &quot;network 10.0.12.0 \/30 area 0&quot;,\n        &quot;ip ospf network 10.0.12.0 area 0&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;The &lt;code&gt;network&lt;\/code&gt; command takes a wildcard mask, not a subnet mask. A \/30 is 255.255.255.252, whose wildcard (inverse) is 0.0.0.3. So &lt;code&gt;network 10.0.12.0 0.0.0.3 area 0&lt;\/code&gt; matches the two host addresses on that link.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;q&quot;: &quot;What is the interface-method equivalent of advertising an interface into OSPF process 1, area 0?&quot;,\n      &quot;options&quot;: [\n        &quot;Enter the interface and type ip ospf 1 area 0&quot;,\n        &quot;Enter the interface and type network area 0&quot;,\n        &quot;ospf enable on the interface&quot;,\n        &quot;router ospf 1 then no passive-interface&quot;\n      ],\n      &quot;answer&quot;: 0,\n      &quot;explanation&quot;: &quot;Under the interface, &lt;code&gt;ip ospf 1 area 0&lt;\/code&gt; enables OSPF directly, with no &lt;code&gt;network&lt;\/code&gt; statement back in router configuration mode. It auto-creates process 1 if it does not exist. Our lab used network statements on R1 and R3 and the interface method on R2.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;q&quot;: &quot;You set router-id under an OSPF process that is already running. Why does the new ID not take effect immediately?&quot;,\n      &quot;options&quot;: [\n        &quot;The command is rejected&quot;,\n        &quot;The router ID is chosen once at process start; you must run clear ip ospf process (or reload) to apply it&quot;,\n        &quot;It needs a reboot only&quot;,\n        &quot;Router IDs cannot be set manually&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;OSPF selects its router ID once, when the process starts, in the order: explicit router-id, then highest loopback IP, then highest active interface IP. Changing it on a live process requires &lt;code&gt;clear ip ospf process&lt;\/code&gt; to restart the process so the new ID is used.&quot;,\n      &quot;validated&quot;: &quot;doc&quot;\n    },\n    {\n      &quot;q&quot;: &quot;What does passive-interface do to an OSPF interface?&quot;,\n      &quot;options&quot;: [\n        &quot;Removes the network from OSPF entirely&quot;,\n        &quot;Stops sending OSPF Hellos out that interface, but the interface&#039;s network is still advertised&quot;,\n        &quot;Shuts the interface down&quot;,\n        &quot;Blocks all routing updates in and out&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;&lt;code&gt;passive-interface&lt;\/code&gt; suppresses Hellos on that interface so no adjacency forms there (ideal for a LAN with only hosts), while the interface&#039;s subnet keeps being advertised into OSPF. In our lab the LAN loopbacks were passive yet still appeared as O routes on other routers.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;q&quot;: &quot;On the edge router you run default-information originate. What has to be true, and what do other routers see?&quot;,\n      &quot;options&quot;: [\n        &quot;Nothing extra; every router auto-generates a default&quot;,\n        &quot;A default route must already exist on the edge router; other routers then learn O*E2 0.0.0.0\/0 and the edge becomes an ASBR&quot;,\n        &quot;It only works with a loopback&quot;,\n        &quot;It replaces all OSPF routes with a default&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;&lt;code&gt;default-information originate&lt;\/code&gt; floods the edge router&#039;s existing default route into OSPF. Without a default route present it injects nothing (unless you add &lt;code&gt;always&lt;\/code&gt;). Downstream routers install &lt;code&gt;O*E2 0.0.0.0\/0&lt;\/code&gt; and the originator shows as an autonomous system boundary router in show ip protocols.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;q&quot;: &quot;Which command confirms an OSPF adjacency reached the FULL state?&quot;,\n      &quot;options&quot;: [\n        &quot;show ip ospf&quot;,\n        &quot;show ip ospf neighbor&quot;,\n        &quot;show ip ospf database&quot;,\n        &quot;show running-config&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;&lt;code&gt;show ip ospf neighbor&lt;\/code&gt; lists each neighbor with its state. FULL means the databases are synchronized; on a broadcast link you also see the role after the slash, for example FULL\/DR or FULL\/BDR.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;type&quot;: &quot;multi&quot;,\n      &quot;q&quot;: &quot;Which statements about verifying OSPF are correct? Select all that apply.&quot;,\n      &quot;options&quot;: [\n        &quot;show ip protocols lists the networks advertised, the router ID, and any passive interfaces&quot;,\n        &quot;show ip ospf interface brief shows the cost and DR\/BDR role per interface&quot;,\n        &quot;A neighbor stuck in EXSTART\/EXCHANGE often points to an MTU mismatch&quot;,\n        &quot;show ip ospf neighbor in the 2WAY state means the databases are fully synchronized&quot;\n      ],\n      &quot;explanation&quot;: &quot;show ip protocols summarizes the process (router ID, networks, passive interfaces, ASBR flag); show ip ospf interface brief gives a one-line-per-interface view with cost and role; EXSTART\/EXCHANGE hangs are classically an MTU mismatch. 2WAY is NOT full sync, it just means the routers see each other (normal between DROTHERs).&quot;,\n      &quot;validated&quot;: &quot;lab&quot;,\n      &quot;answers&quot;: [\n        0,\n        1,\n        2\n      ]\n    },\n    {\n      &quot;type&quot;: &quot;match&quot;,\n      &quot;q&quot;: &quot;Match each verification command to what it confirms.&quot;,\n      &quot;pairs&quot;: [\n        {\n          &quot;left&quot;: &quot;show ip ospf neighbor&quot;,\n          &quot;right&quot;: &quot;Adjacency state (FULL) and DR\/BDR role&quot;\n        },\n        {\n          &quot;left&quot;: &quot;show ip route ospf&quot;,\n          &quot;right&quot;: &quot;Learned routes with [110\/cost]&quot;\n        },\n        {\n          &quot;left&quot;: &quot;show ip ospf interface brief&quot;,\n          &quot;right&quot;: &quot;Cost and OSPF state per interface&quot;\n        },\n        {\n          &quot;left&quot;: &quot;show ip protocols&quot;,\n          &quot;right&quot;: &quot;Networks advertised and passive interfaces&quot;\n        }\n      ],\n      &quot;explanation&quot;: &quot;Each show command answers a different question: neighbor for adjacency, route for what was learned, interface brief for per-interface cost\/role, and protocols for how the process is configured.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;q&quot;: &quot;What problem does router-on-a-stick solve?&quot;,\n      &quot;options&quot;: [\n        &quot;It extends a single VLAN across two switches&quot;,\n        &quot;It lets one router route traffic between multiple VLANs over a single physical link using subinterfaces&quot;,\n        &quot;It increases the bandwidth of a trunk&quot;,\n        &quot;It removes the need for a default gateway&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;Hosts in different VLANs are in different subnets and cannot talk without a Layer 3 device. Router-on-a-stick uses one router interface, split into 802.1Q subinterfaces (one per VLAN), to route between them over a single trunk to the switch.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;q&quot;: &quot;How do you create the gateway for VLAN 10 on the router?&quot;,\n      &quot;options&quot;: [\n        &quot;Put an IP on the physical interface and tag it&quot;,\n        &quot;Create a subinterface, set encapsulation dot1Q 10, and assign the IP there&quot;,\n        &quot;Add a static route for VLAN 10&quot;,\n        &quot;Enable ip routing on VLAN 10&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;Each VLAN gets its own subinterface, for example &lt;code&gt;interface GigabitEthernet0\/0.10&lt;\/code&gt;, with &lt;code&gt;encapsulation dot1Q 10&lt;\/code&gt; to match the VLAN tag and an IP address that becomes that VLAN&#039;s default gateway.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;q&quot;: &quot;What IP address does the physical interface (Gi0\/0) carry in a router-on-a-stick setup?&quot;,\n      &quot;options&quot;: [\n        &quot;The gateway for VLAN 1&quot;,\n        &quot;None; only the subinterfaces have IP addresses&quot;,\n        &quot;The same IP as the switch&quot;,\n        &quot;A loopback address&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;The physical interface is brought up with &lt;code&gt;no shutdown&lt;\/code&gt; but carries no IP. All Layer 3 addresses live on the subinterfaces. In the lab, &lt;code&gt;show ip interface brief&lt;\/code&gt; shows Gi0\/0 as unassigned while Gi0\/0.10 and Gi0\/0.20 hold the gateway IPs.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;q&quot;: &quot;How must the switch port connected to the router be configured?&quot;,\n      &quot;options&quot;: [\n        &quot;As an access port in VLAN 1&quot;,\n        &quot;As an 802.1Q trunk carrying the VLANs being routed&quot;,\n        &quot;As a routed port with an IP&quot;,\n        &quot;Shut down&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;The link has to carry tagged frames for every routed VLAN, so the switch port is a trunk (&lt;code&gt;switchport mode trunk&lt;\/code&gt;) with those VLANs allowed. An access port would only pass one untagged VLAN and break inter-VLAN routing.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;q&quot;: &quot;On the router, how do you handle the trunk&#039;s native (untagged) VLAN?&quot;,\n      &quot;options&quot;: [\n        &quot;It is impossible to route the native VLAN&quot;,\n        &quot;Add the native keyword: encapsulation dot1Q &lt;vlan&gt; native on that subinterface&quot;,\n        &quot;Use a separate physical interface&quot;,\n        &quot;Set switchport native vlan on the router&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;Frames in the native VLAN arrive untagged. To route them, the matching subinterface uses &lt;code&gt;encapsulation dot1Q &lt;vlan&gt; native&lt;\/code&gt; so the router expects no tag for that VLAN. The native VLAN must match the switch&#039;s native VLAN.&quot;,\n      &quot;validated&quot;: &quot;doc&quot;\n    },\n    {\n      &quot;type&quot;: &quot;numeric&quot;,\n      &quot;q&quot;: &quot;In a router-on-a-stick design, how many physical cables connect the router to the switch? Type the number.&quot;,\n      &quot;answer&quot;: &quot;1&quot;,\n      &quot;hint&quot;: &quot;It is the reason for the name.&quot;,\n      &quot;placeholder&quot;: &quot;e.g. 2&quot;,\n      &quot;explanation&quot;: &quot;Exactly one. The whole point of router-on-a-stick is to route between many VLANs over a single physical link (the stick), using subinterfaces and 802.1Q tagging instead of one cable per VLAN.&quot;,\n      &quot;validated&quot;: &quot;doc&quot;\n    },\n    {\n      &quot;type&quot;: &quot;multi&quot;,\n      &quot;q&quot;: &quot;Which statements about router-on-a-stick are correct? Select all that apply.&quot;,\n      &quot;options&quot;: [\n        &quot;Each subinterface&#039;s IP is the default gateway for hosts in that VLAN&quot;,\n        &quot;show vlans on the router maps each subinterface to its 802.1Q VLAN&quot;,\n        &quot;The single trunk link can become a bandwidth bottleneck for inter-VLAN traffic&quot;,\n        &quot;A Layer 2 switch alone can route between the VLANs without the router&quot;\n      ],\n      &quot;explanation&quot;: &quot;Hosts point at their subinterface IP as the gateway; &lt;code&gt;show vlans&lt;\/code&gt; confirms the subinterface-to-VLAN mapping; and because all inter-VLAN traffic hairpins over one link, it can saturate, which is why larger networks move to a Layer 3 switch with SVIs. A Layer 2 switch cannot route between VLANs on its own.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;,\n      &quot;answers&quot;: [\n        0,\n        1,\n        2\n      ]\n    },\n    {\n      &quot;type&quot;: &quot;match&quot;,\n      &quot;q&quot;: &quot;Match each command or output to its role in router-on-a-stick.&quot;,\n      &quot;pairs&quot;: [\n        {\n          &quot;left&quot;: &quot;encapsulation dot1Q 10&quot;,\n          &quot;right&quot;: &quot;Tags the subinterface for VLAN 10&quot;\n        },\n        {\n          &quot;left&quot;: &quot;ip address on the subinterface&quot;,\n          &quot;right&quot;: &quot;The VLAN&#039;s default gateway&quot;\n        },\n        {\n          &quot;left&quot;: &quot;switchport mode trunk&quot;,\n          &quot;right&quot;: &quot;Carries tagged frames to the router&quot;\n        },\n        {\n          &quot;left&quot;: &quot;traceroute across VLANs&quot;,\n          &quot;right&quot;: &quot;Shows the path hops through the router&quot;\n        }\n      ],\n      &quot;explanation&quot;: &quot;The dot1Q encapsulation matches the tag, the subinterface IP is the gateway, the switch trunk delivers the tagged frames, and a cross-VLAN traceroute proves the traffic goes up to the router and back down. In the lab the first hop was the router&#039;s VLAN 10 subinterface (10.10.10.1).&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;q&quot;: &quot;What is a switched virtual interface (SVI)?&quot;,\n      &quot;options&quot;: [\n        &quot;A physical routed port on a switch&quot;,\n        &quot;A virtual Layer 3 interface for a VLAN that acts as the gateway for hosts in that VLAN&quot;,\n        &quot;A trunk port&quot;,\n        &quot;A loopback on the switch&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;An SVI (&lt;code&gt;interface vlan 10&lt;\/code&gt;) is a virtual Layer 3 interface tied to a VLAN. Its IP address is the default gateway for every host in that VLAN, and the switch routes between SVIs internally.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;q&quot;: &quot;What must you enable before a Layer 3 switch will route between VLANs?&quot;,\n      &quot;options&quot;: [\n        &quot;spanning-tree&quot;,\n        &quot;ip routing&quot;,\n        &quot;switchport trunk&quot;,\n        &quot;no switchport on every port&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;Multilayer switches ship with routing disabled. The global command &lt;code&gt;ip routing&lt;\/code&gt; turns on Layer 3 forwarding so the switch will route between its SVIs. Without it, the SVIs exist but no inter-VLAN traffic is forwarded.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;q&quot;: &quot;How do you create the gateway for VLAN 10 on a Layer 3 switch?&quot;,\n      &quot;options&quot;: [\n        &quot;interface GigabitEthernet0\/1 then ip address&quot;,\n        &quot;interface Vlan10, ip address 10.10.10.1 255.255.255.0, no shutdown&quot;,\n        &quot;vlan 10 then ip address&quot;,\n        &quot;ip route 10.10.10.0&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;Create the SVI with &lt;code&gt;interface Vlan10&lt;\/code&gt;, give it the gateway IP, and bring it up with &lt;code&gt;no shutdown&lt;\/code&gt;. The VLAN itself must already exist in the VLAN database.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;q&quot;: &quot;When does a VLAN&#039;s SVI come up (line protocol up)?&quot;,\n      &quot;options&quot;: [\n        &quot;Always, as soon as it is configured&quot;,\n        &quot;When the VLAN exists, the SVI is no shutdown, and at least one port in that VLAN is up and in the spanning-tree forwarding state&quot;,\n        &quot;Only when a trunk is configured&quot;,\n        &quot;Only after ip routing is disabled&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;An SVI stays down until its VLAN has at least one member port that is up and forwarding (autostate). So a fresh SVI with no connected host ports, or one whose only port is STP-blocked, shows down even though the config is correct. Bring up a forwarding port in the VLAN and the SVI comes up.&quot;,\n      &quot;validated&quot;: &quot;doc&quot;\n    },\n    {\n      &quot;q&quot;: &quot;Why is a Layer 3 switch preferred over router-on-a-stick at scale?&quot;,\n      &quot;options&quot;: [\n        &quot;It is cheaper than any router&quot;,\n        &quot;It routes between VLANs in hardware with no single-link bottleneck, instead of hairpinning all traffic over one trunk&quot;,\n        &quot;It does not need VLANs&quot;,\n        &quot;It avoids the need for IP addresses&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;Router-on-a-stick sends all inter-VLAN traffic up and back over one trunk and routes in software. A Layer 3 switch routes between SVIs in its switching ASICs at line rate, with no shared-link bottleneck, which is why it is the production choice.&quot;,\n      &quot;validated&quot;: &quot;doc&quot;\n    },\n    {\n      &quot;type&quot;: &quot;numeric&quot;,\n      &quot;q&quot;: &quot;On a Layer 3 switch routing 4 VLANs with SVIs, how many SVIs do you configure? Type the number.&quot;,\n      &quot;answer&quot;: &quot;4&quot;,\n      &quot;hint&quot;: &quot;One gateway per VLAN.&quot;,\n      &quot;placeholder&quot;: &quot;e.g. 2&quot;,\n      &quot;explanation&quot;: &quot;One SVI per VLAN that needs a gateway, so four VLANs means four SVIs (interface Vlan10, Vlan20, and so on). Each SVI is that VLAN&#039;s default gateway.&quot;,\n      &quot;validated&quot;: &quot;doc&quot;\n    },\n    {\n      &quot;type&quot;: &quot;multi&quot;,\n      &quot;q&quot;: &quot;Which statements about Layer 3 switch inter-VLAN routing are correct? Select all that apply.&quot;,\n      &quot;options&quot;: [\n        &quot;Each VLAN subnet appears in show ip route as connected out its SVI (for example, C 10.10.10.0\/24 Vlan10)&quot;,\n        &quot;ip routing must be enabled for the switch to forward between SVIs&quot;,\n        &quot;Hosts use the SVI IP as their default gateway&quot;,\n        &quot;A traceroute between VLANs shows the SVI as the first hop&quot;\n      ],\n      &quot;explanation&quot;: &quot;All four are true. The SVIs show as connected routes, ip routing enables forwarding, the SVI IP is the gateway, and a cross-VLAN traceroute lands on the SVI as hop 1 because the switch itself is doing the routing.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;,\n      &quot;answers&quot;: [\n        0,\n        1,\n        2,\n        3\n      ]\n    },\n    {\n      &quot;type&quot;: &quot;match&quot;,\n      &quot;q&quot;: &quot;Match each command or output to its role on a Layer 3 switch.&quot;,\n      &quot;pairs&quot;: [\n        {\n          &quot;left&quot;: &quot;ip routing&quot;,\n          &quot;right&quot;: &quot;Enables Layer 3 forwarding&quot;\n        },\n        {\n          &quot;left&quot;: &quot;interface Vlan10&quot;,\n          &quot;right&quot;: &quot;Creates the VLAN&#039;s gateway (SVI)&quot;\n        },\n        {\n          &quot;left&quot;: &quot;switchport access vlan 10&quot;,\n          &quot;right&quot;: &quot;Puts a host port in VLAN 10&quot;\n        },\n        {\n          &quot;left&quot;: &quot;show ip route&quot;,\n          &quot;right&quot;: &quot;Shows connected SVI subnets&quot;\n        }\n      ],\n      &quot;explanation&quot;: &quot;ip routing turns on routing, the SVI is the gateway, the access-port command places hosts in a VLAN, and show ip route confirms each VLAN subnet is connected via its SVI.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;q&quot;: &quot;What problem does a first hop redundancy protocol solve?&quot;,\n      &quot;options&quot;: [\n        &quot;It encrypts traffic between routers&quot;,\n        &quot;It removes the single point of failure created by one default gateway&quot;,\n        &quot;It speeds up routing convergence inside an OSPF area&quot;,\n        &quot;It assigns IP addresses to hosts&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;Hosts use one default gateway. If that router fails, every host on the subnet is cut off. A first hop redundancy protocol lets two or more routers share one virtual gateway so the failure of any single router is invisible to the hosts.&quot;,\n      &quot;validated&quot;: &quot;doc&quot;\n    },\n    {\n      &quot;q&quot;: &quot;How do hosts reach the virtual gateway in an HSRP group?&quot;,\n      &quot;options&quot;: [\n        &quot;They are configured with both routers&#039; real IP addresses&quot;,\n        &quot;They use the shared virtual IP as their default gateway and never learn the routers&#039; real addresses&quot;,\n        &quot;They broadcast to find an active router for every packet&quot;,\n        &quot;They alternate between the two routers packet by packet&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;Hosts point at the virtual IP, for example 192.168.10.254, and ARP for it. The active router answers with the virtual MAC. The hosts never use or even learn the routers&#039; real interface addresses.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;q&quot;: &quot;How is the HSRP active router chosen?&quot;,\n      &quot;options&quot;: [\n        &quot;Lowest priority wins&quot;,\n        &quot;Highest priority wins, a tie breaks on the highest IP address, and the default priority is 100&quot;,\n        &quot;The router with the lowest IP always wins&quot;,\n        &quot;The first router configured stays active permanently&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;HSRP elects the highest-priority router as active. Priority defaults to 100, so you raise one router&#039;s priority to make it the predictable active. If priorities tie, the higher real IP wins.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;type&quot;: &quot;numeric&quot;,\n      &quot;q&quot;: &quot;What is the default HSRP priority? Type the number.&quot;,\n      &quot;answer&quot;: &quot;100&quot;,\n      &quot;hint&quot;: &quot;You raise it to force a router to be active.&quot;,\n      &quot;placeholder&quot;: &quot;e.g. 120&quot;,\n      &quot;explanation&quot;: &quot;The default HSRP priority is 100. The highest priority wins the active role, so configuring 110 on one router makes it active over a default-100 peer.&quot;,\n      &quot;validated&quot;: &quot;doc&quot;\n    },\n    {\n      &quot;q&quot;: &quot;What does HSRP preemption do?&quot;,\n      &quot;options&quot;: [\n        &quot;Encrypts HSRP hello messages&quot;,\n        &quot;Lets a higher-priority router reclaim the active role when it comes back online&quot;,\n        &quot;Forces a failover every 10 seconds&quot;,\n        &quot;Disables the standby router&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;Without preemption, a recovered router stays standby even when it holds the higher priority. With preemption, the higher-priority router takes the active role back as soon as it returns. The P flag in show standby brief means preemption is enabled.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;q&quot;: &quot;After an HSRP failover, why do hosts keep working without re-ARPing?&quot;,\n      &quot;options&quot;: [\n        &quot;They detect the new router by broadcast&quot;,\n        &quot;The virtual MAC moves to the new active router unchanged, so each host&#039;s ARP cache stays valid&quot;,\n        &quot;Each host is reconfigured automatically&quot;,\n        &quot;HSRP rewrites the host routing tables&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;The virtual IP and virtual MAC do not change during failover, they simply move to the new active router. Because the MAC the hosts cached is still valid, they keep forwarding frames with no re-ARP and notice nothing.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;type&quot;: &quot;numeric&quot;,\n      &quot;q&quot;: &quot;With default HSRP timers, how many seconds is the hold time before the standby promotes itself? Type the number.&quot;,\n      &quot;answer&quot;: &quot;10&quot;,\n      &quot;hint&quot;: &quot;Hellos are sent every 3 seconds.&quot;,\n      &quot;placeholder&quot;: &quot;e.g. 30&quot;,\n      &quot;explanation&quot;: &quot;Default HSRP timers are a 3 second hello and a 10 second hold time. The standby waits out the hold time after the active goes silent before taking over, so a hard failure costs up to ten seconds unless you tune the timers down.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;q&quot;: &quot;Which first hop redundancy protocol is an open standard?&quot;,\n      &quot;options&quot;: [\n        &quot;HSRP&quot;,\n        &quot;GLBP&quot;,\n        &quot;VRRP&quot;,\n        &quot;All three are Cisco proprietary&quot;\n      ],\n      &quot;answer&quot;: 2,\n      &quot;explanation&quot;: &quot;VRRP is the open standard, defined by RFC 5798, so it works across mixed vendors. HSRP and GLBP are both Cisco proprietary.&quot;,\n      &quot;validated&quot;: &quot;doc&quot;\n    },\n    {\n      &quot;q&quot;: &quot;Which protocol load-balances traffic across multiple routers by default?&quot;,\n      &quot;options&quot;: [\n        &quot;HSRP&quot;,\n        &quot;VRRP&quot;,\n        &quot;GLBP&quot;,\n        &quot;None of them can load-balance&quot;\n      ],\n      &quot;answer&quot;: 2,\n      &quot;explanation&quot;: &quot;GLBP elects one active virtual gateway (AVG) that answers every ARP request but replies with a different forwarder&#039;s (AVF) virtual MAC each time, spreading hosts across the routers. HSRP and VRRP keep a single active forwarder while the others stand by, though you can run two HSRP groups to split load manually.&quot;,\n      &quot;validated&quot;: &quot;doc&quot;\n    },\n    {\n      &quot;type&quot;: &quot;match&quot;,\n      &quot;q&quot;: &quot;Match each first hop redundancy protocol to its role names or property.&quot;,\n      &quot;pairs&quot;: [\n        {\n          &quot;left&quot;: &quot;HSRP&quot;,\n          &quot;right&quot;: &quot;Active \/ Standby&quot;\n        },\n        {\n          &quot;left&quot;: &quot;VRRP&quot;,\n          &quot;right&quot;: &quot;Master \/ Backup&quot;\n        },\n        {\n          &quot;left&quot;: &quot;GLBP&quot;,\n          &quot;right&quot;: &quot;AVG \/ AVF (load balances)&quot;\n        },\n        {\n          &quot;left&quot;: &quot;Open standard&quot;,\n          &quot;right&quot;: &quot;VRRP (RFC 5798)&quot;\n        }\n      ],\n      &quot;explanation&quot;: &quot;HSRP uses Active and Standby, VRRP uses Master and Backup, and GLBP uses an active virtual gateway (AVG) and active virtual forwarders (AVF) to share traffic. VRRP is the open standard of the three.&quot;,\n      &quot;validated&quot;: &quot;doc&quot;\n    },\n    {\n      &quot;q&quot;: &quot;A ping across the network fails. What is the most useful command to run first on each hop?&quot;,\n      &quot;options&quot;: [\n        &quot;show running-config&quot;,\n        &quot;show ip route, to see whether this router has a path to the destination subnet&quot;,\n        &quot;show version&quot;,\n        &quot;clear ip route *&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;Connectivity is a routing question. show ip route tells you immediately whether the router even knows how to reach the destination subnet. A missing route for that subnet is the single most common cause of a connectivity failure.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;q&quot;: &quot;show ip route has no entry for the destination subnet, but show ip ospf neighbor shows the neighbor as FULL. What does FULL tell you?&quot;,\n      &quot;options&quot;: [\n        &quot;The adjacency is broken, restart OSPF&quot;,\n        &quot;The adjacency is healthy, so suspect a missing advertisement or a down interface, not the neighbor&quot;,\n        &quot;The route will appear after the dead timer expires&quot;,\n        &quot;FULL means the route is being filtered by an ACL&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;FULL means the two routers formed an adjacency and exchanged databases. It does NOT guarantee a route for every subnet. A missing route with a FULL neighbor points downstream: the remote network is down or is not being advertised.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;q&quot;: &quot;show ip interface brief lists an interface as &#039;administratively down&#039;. What does that mean?&quot;,\n      &quot;options&quot;: [\n        &quot;A cable or physical layer problem&quot;,\n        &quot;A layer 2 encapsulation mismatch&quot;,\n        &quot;Someone left the interface shut; bring it up with no shutdown&quot;,\n        &quot;The interface has no IP address&quot;\n      ],\n      &quot;answer&quot;: 2,\n      &quot;explanation&quot;: &quot;Administratively down means the interface was manually shut. Fix it with no shutdown. This is different from down\/down (physical or cabling) and up\/down (a layer 2 mismatch).&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;type&quot;: &quot;match&quot;,\n      &quot;q&quot;: &quot;Match each show ip interface brief status to its usual cause.&quot;,\n      &quot;pairs&quot;: [\n        {\n          &quot;left&quot;: &quot;administratively down \/ down&quot;,\n          &quot;right&quot;: &quot;Interface was manually shut (no shutdown)&quot;\n        },\n        {\n          &quot;left&quot;: &quot;down \/ down&quot;,\n          &quot;right&quot;: &quot;Layer 1: physical or cabling problem&quot;\n        },\n        {\n          &quot;left&quot;: &quot;up \/ down&quot;,\n          &quot;right&quot;: &quot;Layer 2 mismatch (encapsulation, keepalive)&quot;\n        },\n        {\n          &quot;left&quot;: &quot;up \/ up&quot;,\n          &quot;right&quot;: &quot;Interface is working&quot;\n        }\n      ],\n      &quot;explanation&quot;: &quot;The two fields are Status (line) and Protocol. Administratively down is human-shut; down\/down is layer 1; up\/down is layer 2; up\/up is healthy. Each status points you at a different layer.&quot;,\n      &quot;validated&quot;: &quot;doc&quot;\n    },\n    {\n      &quot;q&quot;: &quot;The forward path is fixed but the ping still fails. Why must you check both routers?&quot;,\n      &quot;options&quot;: [\n        &quot;OSPF only works in one direction&quot;,\n        &quot;Reachability is bidirectional, so the reply needs a return route that may still be missing&quot;,\n        &quot;Pings always need a static route&quot;,\n        &quot;The ARP cache must be cleared on both ends&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;A packet needs a working path in both directions. Even with a route to the destination, the reply is dropped if the far router has no route back to the source subnet. Always confirm both directions.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;q&quot;: &quot;Which command shows exactly which networks a router is advertising into OSPF?&quot;,\n      &quot;options&quot;: [\n        &quot;show ip ospf neighbor&quot;,\n        &quot;show ip route ospf&quot;,\n        &quot;show running-config | section router ospf (or show ip protocols)&quot;,\n        &quot;show interfaces&quot;\n      ],\n      &quot;answer&quot;: 2,\n      &quot;explanation&quot;: &quot;show running-config | section router ospf lists the network statements; show ip protocols summarizes the same. A missing or wrong network statement (or wildcard) leaves a subnet unadvertised even when the adjacency is FULL.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;q&quot;: &quot;show ip ospf neighbor shows the neighbor stuck in EXSTART or INIT instead of FULL. What category of problem is this?&quot;,\n      &quot;options&quot;: [\n        &quot;A missing network statement&quot;,\n        &quot;The adjacency itself: a mismatched area, hello\/dead timers, subnet mask, MTU, or authentication&quot;,\n        &quot;A shut interface on the local router&quot;,\n        &quot;A duplicate IP address on a host&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;A neighbor that never reaches FULL is an adjacency-formation problem. Common causes are mismatched area ID, mismatched hello\/dead timers, a subnet mask mismatch on the link, an MTU mismatch (often stuck in EXSTART\/EXCHANGE), or authentication. That is a different fix from a missing advertisement.&quot;,\n      &quot;validated&quot;: &quot;doc&quot;\n    },\n    {\n      &quot;q&quot;: &quot;In show ip route, what does an &#039;O&#039; code in front of a route mean?&quot;,\n      &quot;options&quot;: [\n        &quot;The route is down&quot;,\n        &quot;The route was learned through OSPF&quot;,\n        &quot;The route is a static override&quot;,\n        &quot;The route is to an offline subnet&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;O marks a route learned via OSPF, shown with [administrative-distance\/metric], for example O 10.0.2.0\/24 [110\/2]. C is connected, L is local, S is static.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    },\n    {\n      &quot;q&quot;: &quot;After applying a fix, what is the correct final step?&quot;,\n      &quot;options&quot;: [\n        &quot;Save the config and close the ticket&quot;,\n        &quot;Re-run the exact test that failed and confirm the new route is in the table&quot;,\n        &quot;Reload both routers&quot;,\n        &quot;Clear the ARP cache and move on&quot;\n      ],\n      &quot;answer&quot;: 1,\n      &quot;explanation&quot;: &quot;Verify on evidence, not theory. Re-run the same ping that failed and confirm the destination route now appears in show ip route. A fix you have not re-tested is a guess.&quot;,\n      &quot;validated&quot;: &quot;lab&quot;\n    }\n  ]\n}\n\" data-quiz-count=\"30\"><div class=\"cfg-quiz-loading\">Loading quiz...<\/div><\/div>\n\n\n<p>Once you can clear this consistently, the hardest part of the exam is behind you. Use the topic list below to shore up anything that tripped you.<\/p>\n\n<h2>What Domain 3 covers<\/h2>\n\n<p>Every sub-topic in this practice test has a full hands-on guide with real Cisco output. Work through any that the test exposed as weak:<\/p>\n\n<p><strong>Reading the table and forwarding:<\/strong> start with <a href=\"https:\/\/computingforgeeks.com\/cisco-ip-routing-table-explained\/\">how to read the routing table<\/a>, the skill every other Domain 3 topic builds on, then see <a href=\"https:\/\/computingforgeeks.com\/cisco-router-packet-forwarding-explained\/\">how a router actually forwards a packet<\/a> with CEF, the FIB, and the Layer 2 rewrite.<\/p>\n\n<p><strong>Static routing:<\/strong> configure <a href=\"https:\/\/computingforgeeks.com\/cisco-ipv4-static-routes-configuration\/\">IPv4 static and floating routes<\/a>, then carry the same idea into <a href=\"https:\/\/computingforgeeks.com\/cisco-ipv6-static-routes-configuration\/\">IPv6 static routing<\/a>, where the link-local next hop changes the rules.<\/p>\n\n<p><strong>OSPF:<\/strong> learn the moving parts in <a href=\"https:\/\/computingforgeeks.com\/ospf-concepts-explained\/\">OSPF concepts<\/a> (neighbors, DR\/BDR, the LSDB), then put them to work with <a href=\"https:\/\/computingforgeeks.com\/cisco-ospf-single-area-configuration\/\">single-area OSPF configuration<\/a>, the topic behind the routing sims.<\/p>\n\n<p><strong>Inter-VLAN routing:<\/strong> Cisco files inter-VLAN connectivity under Network Access, but it is where Layer 3 routing meets the switched network, so it belongs in any IP Connectivity drill. Route between VLANs with <a href=\"https:\/\/computingforgeeks.com\/cisco-router-on-a-stick-inter-vlan-routing\/\">router-on-a-stick<\/a>, then move to the production answer, a <a href=\"https:\/\/computingforgeeks.com\/cisco-layer3-switch-inter-vlan-svi\/\">Layer 3 switch with SVIs<\/a>.<\/p>\n\n<p><strong>Redundancy and troubleshooting:<\/strong> give hosts a redundant default gateway with a <a href=\"https:\/\/computingforgeeks.com\/cisco-hsrp-fhrp-explained\/\">first hop redundancy protocol<\/a> like HSRP, and tie the whole domain together by <a href=\"https:\/\/computingforgeeks.com\/troubleshoot-ip-connectivity-cisco\/\">working a connectivity fault from symptom to fix<\/a>, the way the exam frames its troubleshooting questions.<\/p>\n\n<h2>Why Domain 3 decides your result<\/h2>\n\n<p>No other domain carries this much weight or this many hands-on questions, so the time you put into IP Connectivity pays back more than anywhere else on the blueprint. Treat this set as a diagnostic you return to, not a one-time check. Retake it until the routing-table reads, the static and OSPF configs, and the inter-VLAN choices are reflex, then move on knowing the heaviest part of the exam is solid. When you can pass it comfortably, the <a href=\"https:\/\/computingforgeeks.com\/quickly-prepare-for-ccna-200-301-exam\/\">CCNA 200-301 study roadmap<\/a> maps the remaining domains, IP Services, Security Fundamentals, and Automation, each with the same mix of tested guides and practice questions.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Free CCNA 200-301 Domain 3 (IP Connectivity) practice test: 30 random questions per retake from a 91-question lab-validated bank, with explanations.<\/p>\n","protected":false},"author":3,"featured_media":169429,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[55],"tags":[524,525],"cfg_series":[39888],"class_list":["post-169430","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-networking","tag-ccna","tag-cisco","cfg_series-ccna-200-301"],"_links":{"self":[{"href":"https:\/\/computingforgeeks.com\/wp-json\/wp\/v2\/posts\/169430","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/computingforgeeks.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/computingforgeeks.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/computingforgeeks.com\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/computingforgeeks.com\/wp-json\/wp\/v2\/comments?post=169430"}],"version-history":[{"count":1,"href":"https:\/\/computingforgeeks.com\/wp-json\/wp\/v2\/posts\/169430\/revisions"}],"predecessor-version":[{"id":169431,"href":"https:\/\/computingforgeeks.com\/wp-json\/wp\/v2\/posts\/169430\/revisions\/169431"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/computingforgeeks.com\/wp-json\/wp\/v2\/media\/169429"}],"wp:attachment":[{"href":"https:\/\/computingforgeeks.com\/wp-json\/wp\/v2\/media?parent=169430"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/computingforgeeks.com\/wp-json\/wp\/v2\/categories?post=169430"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/computingforgeeks.com\/wp-json\/wp\/v2\/tags?post=169430"},{"taxonomy":"cfg_series","embeddable":true,"href":"https:\/\/computingforgeeks.com\/wp-json\/wp\/v2\/cfg_series?post=169430"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}