Network Access for CCNA
This page covers the Network Access domain of the CCNA certification. Master Cybersecurity offers 217 practice questions in this domain, drawn from the same content we use across our timed exam simulations. Below are five sample questions with full answer explanations.
Sample Practice Questions
Question 1
Which 802.11 frame type is Association Response?- A. management
- B. protected frame
- C. action
- D. control
Explanation
The correct answer is: A. management.
802.11 defines three primary frame types — Management, Control, and Data — and Association Response is one of the Management subtypes used during the client-to-AP association handshake (alongside Beacon, Probe Request/Response, Authentication, and Disassociation). A is correct. B (protected frame) is not a frame type at all; it is a flag in the 802.11 header indicating whether the payload is encrypted. C (action) is a different Management subtype used for spectrum management, QoS, and similar operations — never association. D (control) frames carry RTS/CTS, ACK, and Power-Save Poll — low-level signalling, not association handshakes.Question 2
What is a benefit of using a Cisco Wireless LAN Controller?- A. It eliminates the need to configure each access point individually.
- B. Central AP management requires more complex configurations.
- C. Unique SSIDs cannot use the same authentication method.
- D. It supports autonomous and lightweight APs.
Explanation
The correct answer is: A. It eliminates the need to configure each access point individually..
A is correct because a Cisco Wireless LAN Controller (WLC) centralizes configuration, security, RF management, and policy across the lightweight APs it manages — admins push changes once from the WLC instead of touching each AP individually. B inverts the actual benefit; centralized management removes complexity rather than adding it. C is wrong because multiple SSIDs on the same WLC can share or differ on authentication methods freely (e.g., one SSID using PSK and another using 802.1X). D is wrong because the WLC's split-MAC architecture is built for lightweight APs that tunnel to the controller via CAPWAP; autonomous APs run standalone and aren't joined to a WLC.Question 3
Several new coverage cells are required to improve the Wi-Fi network of an organization. Which two standard designs are recommended? (Choose two.)- A. 5GHz provides increased network capacity with up to 23 nonoverlapping channels.
- B. 5GHz channel selection requires an autonomous access point.
- C. Cells that overlap one another are configured to use nonoverlapping channels.
- D. Adjacent cells with overlapping channels use a repeater access point.
- E. For maximum throughput, the WLC is configured to dynamically set adjacent access points to the channel.
Explanation
The correct answers are: C. Cells that overlap one another are configured to use nonoverlapping channels., E. For maximum throughput, the WLC is configured to dynamically set adjacent access points to the channel..
Two channel-design recommendations apply when adding new Wi-Fi cells. C is correct because cells that overlap physically (so clients roam smoothly) must use non-overlapping channels — typically 1/6/11 on 2.4 GHz, or distinct 5 GHz UNII channels — so adjacent APs don't interfere on the same frequency. E is correct because letting the WLC dynamically tune channels via Radio Resource Management (RRM/DCA) maximises throughput by responding to interference and load in real time, beating any static plan. A is wrong because 5 GHz capacity (~24 non-overlapping channels under most regulatory domains) is a fact about the band, not a design recommendation. B is wrong because 5 GHz channel selection works fine on lightweight APs joined to a WLC — autonomous APs aren't required. D is wrong because repeater APs cut throughput in half per hop and aren't the recommended way to fix overlapping-channel interference; non-overlapping channels are.Question 4
How does CAPWAP communicate between an access point in local mode and a WLC?- A. The access point must not be connected to the wired network, as it would create a loop
- B. The access point must be connected to the same switch as the WLC
- C. The access point must directly connect to the WLC using a copper cable
- D. The access point has the ability to link to any switch in the network, assuming connectivity to the WLC
Explanation
The correct answer is: D. The access point has the ability to link to any switch in the network, assuming connectivity to the WLC.
CAPWAP (Control And Provisioning of Wireless Access Points) is the tunnelling protocol between a lightweight AP and its Cisco WLC. Control packets ride UDP/5246 and data packets UDP/5247, both encapsulated in regular IP that routes hop-by-hop across the network. D is correct because the AP only needs IP reachability to the WLC's management interface — it can sit on any switch anywhere in the routed network. A is wrong because the AP must be wired to power up and join — there is no loop concern with CAPWAP. B is wrong because CAPWAP is routed, not switched; the AP and WLC don't need to share an L2 domain or switch. C is wrong because direct copper between AP and WLC isn't required — CAPWAP traverses any number of routed hops.Question 5
Using direct sequence spread spectrum, which three 2.4-GHz channels are used to limit collisions?- A. 5, 6, 7
- B. 1, 2, 3
- C. 1, 6, 11
- D. 1, 5, 10
Explanation
The correct answer is: C. 1, 6, 11.
The 2.4 GHz band is only 83.5 MHz wide and each Wi-Fi channel is 22 MHz wide on 5 MHz centres, so most adjacent channels overlap. To get three channels that don't overlap you have to space them about 25 MHz apart — that gives 1, 6, and 11 (centres at 2412, 2437, and 2462 MHz). C is correct. A (5, 6, 7) and B (1, 2, 3) place channels right next to each other, so their spectra overlap heavily and stations will collide. D (1, 5, 10) gets closer but channels 1 and 5 still overlap because they are only 20 MHz apart, less than the 22 MHz channel width.
Other CCNA domains
- Automation and Programmability (83 questions)
- IP Connectivity (256 questions)
- Network Fundamentals (505 questions)
- Security Fundamentals (108 questions)
- Services (135 questions)