Welcome to the complete, verified CCNA 1 v7.02 & v8 (Introduction to Networks - ITN) Final Exam Answers updated for 2026. Unlike standard answer keys, every question below includes an interactive Answer & Explanation Toggle, step-by-step Cisco IOS CLI verification commands, and downloadable Packet Tracer (.pka) practice topologies.
📥 Download CCNA 1 (ITN v7.02) Final Skills Exam (.PKA) & Study PDF
Practice IPv4/IPv6 subnetting, basic switch/router security, and SSH configuration on Cisco Packet Tracer 8.2+.
Verified Exam Questions & Interactive Explanations
Question 1
Which two traffic types use the Real-Time Transport Protocol (RTP)? (Choose two.)
✔ Correct Answer: A. Video & D. Voice
Technical Explanation: Real-Time Transport Protocol (RTP) runs over UDP and is engineered for latency-sensitive, real-time media streams such as Voice over IP (VoIP) and Video Conferencing. Web (HTTP/HTTPS) and File Transfer (FTP) use TCP for reliable, connection-oriented delivery.
Question 2
Which wireless technology has low-power and data rate requirements making it popular in home automation and IoT applications?
✔ Correct Answer: A. ZigBee
Technical Explanation: ZigBee (IEEE 802.15.4) operates at low data rates and ultra-low battery consumption using short-range mesh networking, making it the industry standard for smart home sensors, smart locks, and lighting automation.
Question 3
Which layer of the TCP/IP model provides a route to forward messages through an internetwork?
✔ Correct Answer: C. Internet
Technical Explanation: The Internet layer of the TCP/IP model maps directly to the OSI Network Layer (Layer 3). It handles logical IP addressing (IPv4/IPv6) and packet routing across interconnected networks.
Question 4
A network administrator is configuring a new Cisco switch for remote management over SSH. Which command is required to generate the asymmetric encryption keys after setting the hostname and domain name?
✔ Correct Answer: A. crypto key generate rsa
Technical Explanation: Before SSH can function on a Cisco IOS device, you must configure a non-default hostname, set an IP domain name (
ip domain-name example.com), and run crypto key generate rsa (minimum 1024-bit or 2048-bit modulus) to create the RSA key pair.
Question 5
What type of server relies on resource record types such as A, NS, AAAA, and MX in order to provide services?
✔ Correct Answer: A. DNS
Technical Explanation: A DNS (Domain Name System) server resolves FQDNs to IP addresses using specific records: A (IPv4), AAAA (IPv6), MX (Mail Exchange), and NS (Authoritative Name Server).
Question 6
A technician configures a switch with these commands: 'interface vlan 1', 'ip address 192.168.1.2 255.255.255.0', 'no shutdown'. However, the switch cannot be pinged from a remote network. What is missing?
✔ Correct Answer: A. ip default-gateway 192.168.1.1 in global configuration mode
Technical Explanation: For a Layer 2 switch to reply to management traffic originating outside its local subnet, it requires the
ip default-gateway [router-ip] command configured in global configuration mode.
Question 7
How many usable host addresses are available on the 192.168.10.128/26 network?
✔ Correct Answer: B. 62
Technical Explanation: A
/26 prefix leaves 32 - 26 = 6 host bits. Using the formula 2^6 - 2 = 64 - 2 = 62 usable host IP addresses (192.168.10.129 through 192.168.10.190, with .128 as network and .191 as broadcast).
Question 8
Which IPv6 address type is routable only on the local link and always begins with FE80::/10?
✔ Correct Answer: C. Link-Local Address (LLA)
Technical Explanation: IPv6 Link-Local Addresses (FE80::/10) are required on every IPv6-enabled interface and are used for neighbor discovery (NDP), SLAAC, and routing protocol peering on the local segment. Routers never forward link-local source or destination packets.
Question 9
When a Cisco switch receives an Ethernet frame with a destination MAC address that is not in its MAC address table, what action does the switch take?
✔ Correct Answer: C. Floods the frame out all active ports except the ingress port
Technical Explanation: This is known as an Unknown Unicast Flood. When the destination MAC is missing from the CAM/MAC table, the switch floods the frame out all ports in the same VLAN except the port on which it was received.
Question 10
Why should an administrator use the 'enable secret' command instead of 'enable password' on a Cisco router?
✔ Correct Answer: A. Type 7 encoding is reversible, whereas enable secret uses strong one-way hashing (MD5/SCRYPT).
Technical Explanation:
enable password (even with service password-encryption) uses weak Type 7 Vigenere cipher encoding that can be reversed in seconds. enable secret stores a strong one-way cryptographic hash (Type 5 MD5, Type 8 PBKDF2, or Type 9 scrypt).
Cisco IOS SSH & Switch Management Verification CLI
Cisco IOS CLI - Verification & Configuration
Switch> enable Switch# configure terminal Switch(config)# hostname SW1-CORE SW1-CORE(config)# ip domain-name ccna-lab.local SW1-CORE(config)# crypto key generate rsa general-keys modulus 2048 SW1-CORE(config)# username admin secret CiscoStrongPass123! SW1-CORE(config)# interface vlan 1 SW1-CORE(config-if)# ip address 192.168.10.2 255.255.255.0 SW1-CORE(config-if)# no shutdown SW1-CORE(config-if)# exit SW1-CORE(config)# ip default-gateway 192.168.10.1 SW1-CORE(config)# line vty 0 15 SW1-CORE(config-line)# transport input ssh SW1-CORE(config-line)# login local SW1-CORE(config-line)# end SW1-CORE# show ip ssh