{"id":"ccna-free","timeLimitSec":450,"questions":[{"id":"ccnaf-001","section":"fund","q":"A host has the address 172.16.45.200/21. What is its network address?","options":["172.16.45.0","172.16.32.0","172.16.40.0","172.16.44.0"],"answer":2,"explain":"A /21 mask is 255.255.248.0, so the third octet moves in blocks of 8 (32, 40, 48). 45 falls in the 40 block, so the network is 172.16.40.0."},{"id":"ccnaf-002","section":"access","q":"Which interface command makes a Cisco switch port a permanent 802.1Q trunk?","options":["switchport mode dynamic auto","switchport access vlan trunk","switchport trunk native vlan 1","switchport mode trunk"],"answer":3,"explain":"switchport mode trunk forces trunking regardless of the other side. dynamic auto only trunks if the neighbour asks for it."},{"id":"ccnaf-003","section":"ipsvc","q":"In Cisco NAT terms, what is the inside local address?","options":["The public address that represents the host","The inside host's own, usually private, address","The address on the router's outside interface","The address of an outside web server"],"answer":1,"explain":"Inside local is the address actually set on the inside host, usually private. Inside global is the public address that represents it on the outside."},{"id":"ccnaf-004","section":"ipconn","q":"A routing table shows 'O 10.1.0.0/16 [110/20] via 192.168.1.2'. What does 110 mean?","options":["OSPF's administrative distance","The age of the route in seconds","The OSPF process number","The OSPF cost to the destination"],"answer":0,"explain":"In [110/20] the first number is the administrative distance (OSPF = 110) and the second is the metric, here an OSPF cost of 20."},{"id":"ccnaf-005","section":"secu","q":"Where should a standard IPv4 ACL usually be applied?","options":["As close to the destination as possible","Only on the router's internet-facing interface","As close to the source as possible","On every interface along the path"],"answer":0,"explain":"A standard ACL matches only the source address. Near the source it would also block that host from places you did not mean to block."}]}