Skip to content
CCNA
All coursesPlacement Report
‹ Back to previous sectionCourse homeAll page URLs

CCNA Interview Questions in Bangalore

36 practice questions with answers for CCNA interviews in Bangalore.

CCNA jobs in Bangalore

Bangalore (Bengaluru) is India's largest technology hub, with global product companies, engineering centres, unicorn start-ups and big IT-services campuses. Product-company interviews here are usually deeper, with more scenario, design and hands-on rounds.

Below are 36 questions that match the mix of service, product and domain employers hiring network support engineers in Bangalore.

Solved for BangaloreStart practicing
3 QUESTIONS FREESign up to unlock the full question bank and track your progress.Unlock every question and answer, then continue practising company-wise and package-wise.
3 questions free Unlock the rest in seconds
01

What is VTP and what are its risks?

Switching and VLANsMedium
Save to ▾
Show answer
VLAN Trunking Protocol shares VLAN definitions from a server switch to clients in the same VTP domain. Modes are server, client, transparent and off. The risk is that a switch with a higher configuration revision number can overwrite and wipe VLANs across the domain. Many networks use transparent mode or VTP version 3 with a primary server to avoid this.
02

Users complain Wi-Fi is slow in a conference room with 60 people. What do you check and fix?

Wireless and AutomationMedium
Save to ▾
Show answer
This is usually a capacity, not a coverage, issue. I check client count per AP and channel utilisation on the controller. Fixes include adding APs with lower transmit power, steering clients to 5 or 6 GHz with band steering, disabling low data rates such as 1, 2 and 5.5 Mbps, using 20 or 40 MHz channels in dense areas, and limiting per-client bandwidth on the SSID.
03

What is the difference between autonomous APs, controller-based APs and cloud-managed APs?

Wireless and AutomationMedium
Save to ▾
Show answer
Autonomous APs are configured one by one and suit very small sites. Lightweight APs are managed by a Wireless LAN Controller using CAPWAP tunnels, which centralises configuration, RF management and roaming, and suits campuses. Cloud-managed APs are configured from a cloud dashboard, ideal for many branches. Split-MAC means real-time functions stay on the AP while management sits on the controller.
04

How do you restrict SSH access to devices from only the management subnet?

Network SecurityMedium
Save to ▾
Show answer
Use a standard ACL on the VTY lines. ip access-list standard MGMT-ONLY permit 10.99.0.0 0.0.0.255 deny any log line vty 0 15 access-class MGMT-ONLY in transport input ssh exec-timeout 10 0 login block-for 120 attempts 3 within 60
05

A PC can ping its default gateway but cannot open any website. How would you troubleshoot?

Network FundamentalsMedium
Save to ▾
Show answer
Gateway reachability proves Layers 1 to 3 locally, so I move upward. I ping a public IP address; if that works but names fail, DNS is the problem, so I check the configured DNS server with ipconfig /all and test with nslookup. If the public IP also fails, I check the router's default route, NAT and upstream link. Finally I check proxy settings and any firewall blocking ports 80 and 443.
06

How would you influence which port becomes the root port on a switch?

STP and EtherChannelHard
Save to ▾
Show answer
The root port is chosen by lowest cost, then sender bridge ID, then sender port ID. To prefer a link I lower its cost. interface GigabitEthernet1/0/49 spanning-tree vlan 10 cost 2 On the upstream switch you can change port priority instead. interface GigabitEthernet1/0/1 spanning-tree vlan 10 port-priority 64
07

What are the default STP path costs for common link speeds?

STP and EtherChannelMedium
Save to ▾
Show answer
With short (802.1D revised) costs: 10 Mbps is 100, 100 Mbps is 19, 1 Gbps is 4 and 10 Gbps is 2. With the long pathcost method, 1 Gbps is 20000 and 10 Gbps is 2000, which distinguishes higher speeds. Root path cost is the sum of costs on ports toward the root, and the lowest total wins when choosing root ports.
08

What is the difference between policing and shaping?

IP ServicesHard
Save to ▾
Show answer
Policing drops or re-marks traffic that exceeds a rate immediately, with no buffering, so it causes TCP retransmissions; it is used inbound or by ISPs. Shaping buffers excess traffic and sends it later, smoothing bursts to a configured rate at the cost of delay; it is used outbound, for example to match a 100 Mbps subscription on a 1 Gbps port.
09

Voice calls are choppy during office hours when the WAN link is busy. How do you fix it?

IP ServicesHard
Save to ▾
Show answer
Choppy voice under load means congestion on the WAN. I make sure phones mark RTP as EF and the access switches trust phone markings, then on the WAN router create a policy with a low latency priority queue for EF limited to the needed bandwidth, CBWFQ for other classes, and shaping to the real carrier rate so queuing happens on my router, not the provider's.
10

What is DTP and why should you disable it?

Switching and VLANsMedium
Save to ▾
Show answer
Dynamic Trunking Protocol negotiates whether a link becomes a trunk. Modes are dynamic auto, dynamic desirable, trunk and access. Auto plus auto stays access, while desirable with auto or desirable forms a trunk. Attackers can use DTP to form a trunk and reach all VLANs, so best practice is to hard-code access or trunk and use switchport nonegotiate on trunks.
11

Compare LACP and PAgP.

STP and EtherChannelMedium
Save to ▾
Show answer
LACP (802.3ad, now 802.1AX) is the open standard with modes active and passive; at least one side must be active. PAgP is proprietary with modes desirable and auto; at least one side must be desirable. Mode on forces the channel with no negotiation, which can cause loops if the other side is not configured. LACP is preferred because it works with servers, firewalls and other vendors.
12

How do you configure a DHCP server on a router?

IP ServicesEasy
Save to ▾
Show answer
Exclude static addresses first, then define the pool. ip dhcp excluded-address 192.168.10.1 192.168.10.20 ip dhcp pool VLAN10 network 192.168.10.0 255.255.255.0 default-router 192.168.10.1 dns-server 8.8.8.8 1.1.1.1 lease 7 show ip dhcp binding show ip dhcp pool
13

What is a voice VLAN and how does it work?

Switching and VLANsMedium
Save to ▾
Show answer
A voice VLAN lets an IP phone and a PC share one switch port while keeping their traffic separate. The port is an access port in the data VLAN, and the switch tells the phone through CDP or LLDP-MED to tag voice frames with the voice VLAN. This allows QoS priority for voice and separate addressing. Configure it with switchport voice vlan.
14

Describe a time you made a configuration mistake. How did you handle it?

IP Addressing and SubnettingMedium
Save to ▾
Show answer
Situation: I applied a /25 mask instead of /24 on a core VLAN interface during a change window. Task: fix it fast and own the error. Action: monitoring alerted on half the users, I checked my change, corrected the mask within ten minutes and informed my lead immediately. Result: impact was short, and I added a peer-review step and a pre-written rollback to every change plan afterwards.
15

A broadcast storm brought the network down after someone connected a cable between two wall ports. How do you prevent this?

STP and EtherChannelMedium
Save to ▾
Show answer
Two wall ports patched to the same switch formed a loop. To stop it now, I find the port with rising broadcast counters and shut it. To prevent repeats, enable PortFast with BPDU Guard on all access ports, keep Rapid PVST+ running everywhere, add storm-control broadcast thresholds on access ports and enable errdisable recovery with a sensible interval.
16

How do you make an access switch port a routed port on a Layer 3 switch?

Switching and VLANsHard
Save to ▾
Show answer
A routed port behaves like a router interface and does not belong to any VLAN. interface GigabitEthernet1/0/1 no switchport ip address 10.0.0.1 255.255.255.252 no shutdown Routed uplinks between distribution and core avoid spanning tree on those links and allow fast routing convergence with ECMP.
17

What are the STP port states and timers in classic 802.1D?

STP and EtherChannelMedium
Save to ▾
Show answer
States are blocking, listening, learning, forwarding and disabled. Timers are hello 2 seconds, forward delay 15 seconds and max age 20 seconds. A port moves from blocking through listening and learning, each 15 seconds, so convergence can take 30 to 50 seconds. That delay is why Rapid STP and PortFast are used in modern networks.
18

Why are channels 1, 6 and 11 used in 2.4 GHz?

Wireless and AutomationEasy
Save to ▾
Show answer
In 2.4 GHz each channel is about 22 MHz wide but channels are only 5 MHz apart, so most adjacent channels overlap and interfere. Channels 1, 6 and 11 are the only three non-overlapping channels, so neighbouring access points should alternate between them. The 5 GHz band has many more non-overlapping 20 MHz channels, which is why it is preferred for capacity.
19

What is EUI-64 and how is the interface ID generated?

IP Addressing and SubnettingHard
Save to ▾
Show answer
EUI-64 builds a 64-bit interface ID from a 48-bit MAC. Split the MAC in half, insert FFFE in the middle and flip the seventh bit of the first byte. For MAC 0050.56AB.CDEF the ID becomes 0250:56FF:FEAB:CDEF. Routers can use ipv6 address 2001:db8:1::/64 eui-64. Hosts often prefer random privacy addresses instead, to avoid exposing the MAC.
20

Traffic is not load balancing across two equal links even though both are in OSPF. What do you check?

Routing and OSPFHard
Save to ▾
Show answer
Both paths must have equal total cost to be installed as ECMP. I check show ip route for two next hops. If only one shows, I compare interface costs, which differ if bandwidth or the reference bandwidth differs. I also check maximum-paths. Even with ECMP, load sharing is per flow using CEF, so a single large flow uses one link only.
21

What is the native VLAN and what problems can a mismatch cause?

Switching and VLANsMedium
Save to ▾
Show answer
The native VLAN is the VLAN whose frames cross a trunk untagged, VLAN 1 by default. Both ends must use the same native VLAN; if they differ, frames leak between VLANs and CDP logs a native VLAN mismatch. For security, set the native VLAN to an unused ID, do not put users in it, and optionally tag it with vlan dot1q tag native to prevent VLAN hopping.
22

Tell me about a time you solved a difficult network outage.

Network FundamentalsMedium
Save to ▾
Show answer
Situation: a branch lost access to the data center during month-end close. Task: restore service fast. Action: I worked bottom-up, found the WAN link up but OSPF stuck in EXSTART, and traced it to an MTU change by the provider. I set ip ospf mtu-ignore as a temporary fix and raised a ticket for the MTU. Result: service was back in 25 minutes and I documented the check in our runbook.
23

Tell me about a time you had to learn a new technology quickly.

STP and EtherChannelMedium
Save to ▾
Show answer
Situation: our team moved from PVST to MST for a data center with 600 VLANs, and I had not used MST. Task: be ready for the migration in two weeks. Action: I read the configuration guides, built the design in a GNS3 lab, broke it deliberately and wrote a step-by-step checklist. Result: the migration ran in one window without outage, and I ran a short knowledge session for the team.
24

How do you write and apply an extended named ACL?

Network SecurityMedium
Save to ▾
Show answer
Allow web traffic from one subnet to a server and block the rest of that subnet. ip access-list extended WEB-ONLY 10 permit tcp 192.168.10.0 0.0.0.255 host 10.0.0.80 eq 443 20 deny ip 192.168.10.0 0.0.0.255 10.0.0.0 0.0.0.255 30 permit ip any any interface vlan 10 ip access-group WEB-ONLY in show access-lists WEB-ONLY
25

Users behind a router can reach local servers but not the internet after a firewall change. NAT is configured. What do you check?

IP ServicesMedium
Save to ▾
Show answer
I check show ip nat translations to see whether translations appear when users browse. If none, I verify ip nat inside and ip nat outside on the correct interfaces, that the ACL used by NAT matches the user subnets, and that the overload interface has an IP. I also check the default route and run show ip nat statistics for hits and misses.
26

How is Rapid PVST+ different from classic STP?

STP and EtherChannelMedium
Save to ▾
Show answer
Rapid PVST+ runs 802.1w per VLAN. It uses a proposal and agreement handshake on point-to-point links so ports move to forwarding in under a second, instead of waiting on timers. It has port roles root, designated, alternate and backup, and states discarding, learning and forwarding. Alternate ports provide an instant backup root port. It is the default on most modern IOS switches.
27

How do you set the root bridge and verify STP?

STP and EtherChannelEasy
Save to ▾
Show answer
Set priorities on the intended primary and secondary roots, then verify. spanning-tree mode rapid-pvst spanning-tree vlan 10,20 root primary ! on the backup switch spanning-tree vlan 10,20 root secondary show spanning-tree vlan 10 show spanning-tree root show spanning-tree summary
28

How do you configure SSH access on a switch or router?

Network FundamentalsMedium
Save to ▾
Show answer
SSH needs a hostname, domain name, RSA keys, a local user and VTY lines restricted to SSH. hostname R1 ip domain-name lab.local crypto key generate rsa modulus 2048 ip ssh version 2 username admin privilege 15 secret Adm1nPass line vty 0 4 login local transport input ssh
29

A PC in VLAN 20 cannot reach a PC in VLAN 30. What do you check?

Switching and VLANsMedium
Save to ▾
Show answer
First I check each PC has the correct IP, mask and gateway for its VLAN. Then I confirm the switch ports are in the right VLANs with show vlan brief, and that the trunk to the Layer 3 device allows both VLANs using show interfaces trunk. On the Layer 3 device I check the SVIs or subinterfaces are up and have the right IPs, and that no ACL blocks the traffic.
30

Tell me about a time you automated or simplified a repetitive task.

IP ServicesMedium
Save to ▾
Show answer
Situation: our team manually backed up 80 router configs each week. Task: save time and avoid missed backups. Action: I enabled the archive feature with time-period on each device and later wrote a small Python script with Netmiko to pull and store configs in Git. Result: weekly effort dropped from four hours to zero, and we could see config differences after every change.
31

What is AAA and the difference between TACACS+ and RADIUS?

Network SecurityMedium
Save to ▾
Show answer
AAA stands for Authentication (who you are), Authorization (what you can do) and Accounting (what you did). TACACS+ uses TCP 49, encrypts the whole payload and separates authentication from authorization, so it is preferred for device administration with per-command control. RADIUS uses UDP 1812 and 1813, encrypts only the password and is used for network access such as 802.1X and VPN.
32

What are the basic steps to configure a WLAN with WPA2 or WPA3 on a controller GUI?

Wireless and AutomationMedium
Save to ▾
Show answer
Steps on a typical WLC GUI: create a dynamic interface with VLAN, IP and DHCP server; go to WLANs and create a new WLAN with profile name and SSID; map it to the dynamic interface; under Security choose WPA2 or WPA3 with PSK or 802.1X and add the RADIUS server for enterprise; set QoS profile; enable the WLAN and apply it to AP groups.
33

How do you use CDP and LLDP to discover neighbours?

Network FundamentalsMedium
Save to ▾
Show answer
CDP is a proprietary Layer 2 discovery protocol enabled by default on IOS; LLDP is the open IEEE 802.1AB standard. show cdp neighbors show cdp neighbors detail configure terminal lldp run show lldp neighbors detail Detail output shows the neighbour's IP, platform and port. Disable CDP on internet-facing ports with no cdp enable.
34

What is SLAAC and how is it different from DHCPv6?

IP Addressing and SubnettingMedium
Save to ▾
Show answer
With SLAAC a host learns the /64 prefix from a router advertisement and builds its own interface ID, without a server. Stateless DHCPv6 adds extra options such as DNS while the address still comes from SLAAC. Stateful DHCPv6 assigns the address itself and keeps bindings, similar to DHCPv4. RA flags M (managed) and O (other config) tell hosts which method to use.
35

A new VLAN's users do not get DHCP addresses, but other VLANs work. What do you check?

IP ServicesMedium
Save to ▾
Show answer
I check that the SVI for the new VLAN is up and has ip helper-address pointing to the DHCP server, that the server has a scope for that subnet with the right gateway, and that the scope is activated. I confirm the VLAN is allowed on trunks. If DHCP snooping is enabled, I check the uplink is trusted, otherwise offers from the server are dropped.
36

What is the MAC address table and what happens when it is full?

Switching and VLANsHard
Save to ▾
Show answer
The MAC address table, stored in CAM, maps MAC addresses to ports and VLANs. When it fills, as in a MAC flooding attack, new addresses cannot be learned and the switch floods unknown unicast frames out of all ports in the VLAN, which lets an attacker sniff traffic. Port security limiting MACs per port prevents this.

Companies with offices in Bangalore (19)

IT services

TCS

CCNA interview questions

  • 30 questions
  • 4 rounds

Mumbai, Chennai, Pune +2

View questions
IT services

Infosys

CCNA interview questions

  • 30 questions
  • 4 rounds

Bengaluru, Mysuru, Pune +2

View questions
IT services

Wipro

CCNA interview questions

  • 30 questions
  • 4 rounds

Bengaluru, Hyderabad, Pune +2

View questions
IT services

HCLTech

CCNA interview questions

  • 30 questions
  • 4 rounds

Noida, Chennai, Bengaluru +2

View questions
IT services

Tech Mahindra

CCNA interview questions

  • 30 questions
  • 4 rounds

Pune, Hyderabad, Bengaluru +2

View questions
Consulting

Accenture

CCNA interview questions

  • 30 questions
  • 4 rounds

Bengaluru, Hyderabad, Pune +2

View questions
IT services

Cognizant

CCNA interview questions

  • 30 questions
  • 4 rounds

Chennai, Bengaluru, Pune +2

View questions
IT services

Capgemini

CCNA interview questions

  • 30 questions
  • 4 rounds

Mumbai, Bengaluru, Pune +2

View questions
IT services

IBM

CCNA interview questions

  • 30 questions
  • 4 rounds

Bengaluru, Pune, Hyderabad +2

View questions
Hardware & semiconductors

Cisco

CCNA interview questions

  • 30 questions
  • 5 rounds

Bengaluru, Pune, Chennai

View questions
Telecom

Airtel

CCNA interview questions

  • 30 questions
  • 4 rounds

Gurugram, Bengaluru, Mumbai +1

View questions
Telecom

Jio Platforms

CCNA interview questions

  • 30 questions
  • 4 rounds

Navi Mumbai, Bengaluru, Hyderabad

View questions
Telecom

Ericsson

CCNA interview questions

  • 30 questions
  • 4 rounds

Gurugram, Bengaluru, Chennai +2

View questions
Telecom

Nokia

CCNA interview questions

  • 30 questions
  • 4 rounds

Bengaluru, Chennai, Noida +1

View questions
IT services

NTT DATA

CCNA interview questions

  • 30 questions
  • 4 rounds

Bengaluru, Pune, Noida +2

View questions
Hardware & semiconductors

Dell Technologies

CCNA interview questions

  • 30 questions
  • 5 rounds

Bengaluru, Hyderabad

View questions
IT services

LTIMindtree

CCNA interview questions

  • 30 questions
  • 4 rounds

Mumbai, Pune, Bengaluru +2

View questions
Banking & finance

HDFC Bank

CCNA interview questions

  • 30 questions
  • 4 rounds

Mumbai, Chennai, Bengaluru

View questions
Product

Amazon

CCNA interview questions

  • 30 questions
  • 5 rounds

Bengaluru, Hyderabad, Chennai +2

View questions

Frequently asked questions

Which companies hire CCNA professionals in Bangalore?

Companies with large offices in Bangalore include TCS, Infosys, Wipro, HCLTech, Tech Mahindra, Accenture, Cognizant, Capgemini, IBM, Cisco. Use their company pages below to practise employer-specific sets.

Are CCNA interviews in Bangalore different from other cities?

The questions depend more on the company than the city. Bangalore's mix of employers decides the style: Product-company interviews here are usually deeper, with more scenario, design and hands-on rounds

How do I find CCNA jobs in Bangalore?

Shortlist companies with Bangalore offices, keep your CV focused on CCNA projects, apply on company career pages and job portals with the Bangalore filter, and practise the questions on this page before each interview.

Other cities

DelhiNoidaGurgaonHyderabadPuneChennaiMumbaiKolkataAhmedabadJaipurLucknowChandigarhIndoreKochiCoimbatoreBhubaneswarNagpurVisakhapatnamThiruvananthapuram

More ways to practise

Company-wise CCNA questionsExperience-wise CCNA questionsRole-wise CCNA questionsCity-wise CCNA questionsMost asked CCNA questionsScenario-based questionsPractical / hands-on questionsHR & behavioural questionsCCNA mock interviewOnline assessment questionsTechnical round questionsManagerial round questionsCCNA topic sheets