Rapid PVST+ forwarding state actions

1. Frames received from the attached segment are processed
   (The port actively forwards frames from its connected segment.)
   
2. Switched frames received from other ports are advanced
   (Frames from other ports are switched out through this port.)
   
3. The port in the forwarding state responds to network management messages
   (It participates in network management protocols like SNMP.)
   
4. BPDUs received from the system module are processed and transmitted
   (The port sends and receives BPDUs to maintain spanning tree.)
   

• Frames received from the attached segment are discarded → Blocking state.
  
• BPDUs received are forwarded to the system module → Listening/Learning states.
  

Which two protocols are used by an administrator for authentication and configuration on access points?
Answer says "802.1x, and RADIUS"

Can you please verify.


Answer:

• TACACS+
  (Terminal Access Controller Access-Control System Plus – used for administrator authentication and authorization for device configuration.)
  
• RADIUS
  (Remote Authentication Dial-In User Service – also used for authentication, commonly for both administrators and wireless clients.)
  

• Kerberos → Used for secure authentication in Active Directory environments, not typically for AP configuration.
  
• 802.1Q → VLAN tagging protocol, not for authentication/configuration.
  
• 802.1X → Used for client authentication (not admin configuration).
  

Please correct this drap and drop as some of the answers that show as "correct" are wrong.



[*]✅ Correct vs Incorrect:

1. Sniffer mode: allows for packet captures of wireless traffic.
   ✔ Correct – Sniffer mode is used for capturing 802.11 frames for analysis.
   
2. FlexConnect mode: allows the access point to communicate with the WLC over a WAN link.
   ✔ Correct – FlexConnect is designed for remote sites where APs connect to WLC over WAN.
   
3. Monitor mode: receive only mode which acts as a dedicated sensor for RFID and IDS.
   ❌ Incorrect – Monitor mode is for detecting rogue APs and IDS scanning, not RFID. It does not serve clients.
   
4. Bridge mode: preferred for connecting access points in a mesh environment.
   ✔ Correct – Bridge mode is used for mesh APs or point-to-point bridging.
   
5. Local mode: transmits normally on one channel and monitors other channels for noise and interference.
   ✔ Correct – Local mode serves clients and performs RRM scanning.
   
6. Rogue detector mode: monitor for rogue APs, does not handle data at all.
   ❌ Incorrect – Rogue detector mode listens for MAC addresses from wired networks to detect rogue APs, not wireless monitoring.
   

The new CCNA v1.1 exam has added Terraform but I do not see any Terraform questions in these practice exams. 

Please advise. 

I also heard that Chef and Puppet were removed and Terraform added. 

When was the last update to these questions??

Thanks, 
James

Does the CCNA contain questions about BGP?


Neither Cisco's CCNA blueprint nor PingMyNetwork's study plan includes BGP.

https://learningnetwork.cisco.com/s/ccna-exam-topics
https://pingmynetwork.com/network/ccna-200-301

I believe R1 has a "typo" for the IP address as it says ".255" but the correct answer shows ".225"

Please advise.

Thanks,
James

At least one of the drag-and-drop answers is likely wrong.

"Monitor- It enables enhanced RFID-tag location tracking" is wrong.

Answers should be:

Monitor

• It provides air-quality data and interference detection across all enabled channels.
  
• It supports analytics for wireless performance testing.
  

• It enables enhanced RFID-tag location tracking.
  
• It supports real-time Wi-Fi client troubleshooting when network engineers are offsite.
  

• It captures and forwards packets on a specific wireless channel.
  
• It supports software that analyzes wireless frames on a remote device.
  

Please check this drag-and-drop: specifically, "Allows sites to be combined without address conflicts" should be set to Unique Local, not Global Unicast Address.

Thanks!
James

The answer says "Create a JSON fiter as a string and pass it ...."

I believe that is not the correct answer.

The correct answer should be:
" Create an XML filter as a string and pass it to get_config() method as an argument."

Please have a look and advise.

Thanks
James

Which type of wireless encryption is used for WPA2 in preshared key mode?

Answer says "AES-256" but that is not part of WPA2.

The answer should be AES-128.

Please check this question and confirm.
Thanks,
James