Skip to content
CCNA
All coursesPlacement Report
‹ Back to previous sectionCourse homeAll page URLs

CCNA Interview Questions in Gurgaon

36 practice questions with answers for CCNA interviews in Gurgaon.

CCNA jobs in Gurgaon

Gurgaon (Gurugram) is home to many multinational, consulting, fintech and consumer-internet offices. Interviews often expect strong business understanding along with technical skills, especially for analytics and product-facing roles.

Below are 36 questions that match the mix of service, product and domain employers hiring network support engineers in Gurgaon.

Solved for GurgaonStart practicing
3 QUESTIONS FREESign up to unlock the full question bank and track your progress.Unlock every question and answer, then continue practising company-wise and package-wise.
3 questions free Unlock the rest in seconds
01

What is AAA and the difference between TACACS+ and RADIUS?

Network SecurityMedium
Save to ▾
Show answer
AAA stands for Authentication (who you are), Authorization (what you can do) and Accounting (what you did). TACACS+ uses TCP 49, encrypts the whole payload and separates authentication from authorization, so it is preferred for device administration with per-command control. RADIUS uses UDP 1812 and 1813, encrypts only the password and is used for network access such as 802.1X and VPN.
02

What are DR and BDR in OSPF and why are they needed?

Routing and OSPFMedium
Save to ▾
Show answer
On multi-access networks such as Ethernet, a full mesh of adjacencies would create too many LSAs. OSPF elects a Designated Router and Backup DR; other routers (DROTHERs) form full adjacency only with them and stay 2-Way with each other. The highest interface priority wins, then highest router ID; priority 0 means never DR. Election is non-preemptive, so a new better router does not take over.
03

Users on a new floor report no network connectivity at all and the switch port LEDs are off. What is your approach?

Network FundamentalsEasy
Save to ▾
Show answer
No link light means a Layer 1 problem. I verify the switch has power and the ports are not administratively shut down with show ip interface brief. I test the cable with a tester, check the patch panel mapping and confirm the NIC is enabled. If the switch uses PoE for phones or access points, I also check the power budget with show power inline.
04

A Python script gets 401 errors when calling a controller REST API. What do you check?

Wireless and AutomationMedium
Save to ▾
Show answer
401 Unauthorized means authentication failed. I check the username and password or API key, whether a token must first be requested from an auth endpoint and sent in a header like X-Auth-Token, whether the token expired, and the exact header name and format. I test the same call with curl or an API client to separate script bugs from credential issues.
05

Users report short outages every few minutes and logs show topology changes. How do you troubleshoot?

STP and EtherChannelHard
Save to ▾
Show answer
Frequent TCNs flush MAC tables and cause flooding. I run show spanning-tree detail to find the port and switch originating topology changes, then follow it hop by hop. Common causes are a flapping link, a host port without PortFast that changes state each time a PC reboots, or a failing NIC. I fix the link and enable PortFast on edge ports so they do not generate TCNs.
06

How do you check interface status and errors on an IOS device?

Network FundamentalsEasy
Save to ▾
Show answer
show ip interface brief gives status and IP of all interfaces, and show interfaces gives counters and duplex. Router# show ip interface brief Router# show interfaces GigabitEthernet0/1 Router# show interfaces status Router# clear counters GigabitEthernet0/1 Status up/down means Layer 1 is up but Layer 2 keepalives fail; administratively down means the interface is shut.
07

What is an underlay and an overlay network?

Wireless and AutomationHard
Save to ▾
Show answer
The underlay is the physical IP network of switches and routers that provides basic reachability, for example OSPF or IS-IS on routed links. The overlay is a virtual network built on top using tunnels such as VXLAN, so logical segments can stretch across the fabric independent of physical topology. SD-Access and SD-WAN use this model, with a fabric controlling the overlay.
08

What is the native VLAN and what problems can a mismatch cause?

Switching and VLANsMedium
Save to ▾
Show answer
The native VLAN is the VLAN whose frames cross a trunk untagged, VLAN 1 by default. Both ends must use the same native VLAN; if they differ, frames leak between VLANs and CDP logs a native VLAN mismatch. For security, set the native VLAN to an unused ID, do not put users in it, and optionally tag it with vlan dot1q tag native to prevent VLAN hopping.
09

After adding a new VLAN, users on one access switch cannot use it but others can. Why?

Switching and VLANsMedium
Save to ▾
Show answer
The most likely cause is the trunk to that switch does not allow the new VLAN, because someone configured an explicit allowed list. Check show interfaces trunk and add it with switchport trunk allowed vlan add 50, not without add, which would replace the list. Also confirm the VLAN exists on that switch with show vlan brief, especially if VTP is transparent.
10

What is NAT and what are its types?

IP ServicesEasy
Save to ▾
Show answer
Network Address Translation rewrites IP addresses as packets cross a router, usually private inside addresses to public outside ones. Static NAT maps one inside address to one public address, often for servers. Dynamic NAT maps from a pool. PAT, or NAT overload, maps many inside hosts to one public IP using unique source ports, and is what almost every office and home router uses.
11

Write a simple Ansible playbook that configures NTP on IOS devices.

Wireless and AutomationMedium
Save to ▾
Show answer
Ansible uses YAML and the ios_config module. - name: Configure NTP hosts: ios_switches gather_facts: no connection: network_cli tasks: - name: Set NTP server ios_config: lines: - ntp server 10.0.0.10 save_when: modified
12

What is a floating static route?

Routing and OSPFMedium
Save to ▾
Show answer
A floating static route is a backup static route with a higher administrative distance than the primary route, so it stays out of the routing table until the primary disappears. For example, if OSPF (AD 110) learns the main path, ip route 0.0.0.0 0.0.0.0 203.0.113.1 200 installs only when OSPF loses the route. It is common for backup internet or 4G links.
13

How do you back up and restore a device configuration?

IP ServicesMedium
Save to ▾
Show answer
Copy the config to a server and back. copy running-config tftp://10.0.0.40/R1-backup.cfg copy running-config scp://admin@10.0.0.40/R1.cfg copy tftp://10.0.0.40/R1-backup.cfg running-config configure replace flash:R1-good.cfg archive path flash:R1-archive write-memory configure replace gives a clean rollback instead of merging.
14

How do you change OSPF DR election on a segment?

Routing and OSPFHard
Save to ▾
Show answer
Set interface priority; higher wins and 0 never becomes DR. interface GigabitEthernet0/0 ip ospf priority 255 ! on a router that should never be DR interface GigabitEthernet0/0 ip ospf priority 0 clear ip ospf process Because election is non-preemptive, reset the process or the neighbours for the change to take effect.
15

A newly configured router interface rejects the IP 192.168.5.64/26. Why?

IP Addressing and SubnettingEasy
Save to ▾
Show answer
With a /26 the block size is 64, so 192.168.5.64 is the network address of the subnet .64 to .127 and cannot be assigned to a host or interface. IOS reports a bad mask or overlap error. Use a usable address such as 192.168.5.65 instead. Similarly .127 would be the broadcast. Always calculate the subnet boundary before configuring addresses.
16

How do you write and apply an extended named ACL?

Network SecurityMedium
Save to ▾
Show answer
Allow web traffic from one subnet to a server and block the rest of that subnet. ip access-list extended WEB-ONLY 10 permit tcp 192.168.10.0 0.0.0.255 host 10.0.0.80 eq 443 20 deny ip 192.168.10.0 0.0.0.255 10.0.0.0 0.0.0.255 30 permit ip any any interface vlan 10 ip access-group WEB-ONLY in show access-lists WEB-ONLY
17

Your company is running out of IP addresses on a /24 user subnet. What options do you have?

IP Addressing and SubnettingMedium
Save to ▾
Show answer
Options: expand to a /23 if the adjacent block is free and update the router and DHCP scope; create a new VLAN and subnet for some users, which also limits broadcast size; shorten DHCP lease times if many guest devices hold leases; and move printers, phones and IoT devices to their own subnets. Long term, plan an addressing scheme with growth headroom and consider dual-stack IPv6.
18

How do you configure a Layer 3 EtherChannel?

STP and EtherChannelHard
Save to ▾
Show answer
Make members routed ports first, then put the IP on the port-channel. interface range TenGigabitEthernet1/1/1 - 2 no switchport channel-group 10 mode active interface Port-channel10 no switchport ip address 10.0.0.1 255.255.255.252 show etherchannel 10 summary show ip interface brief
19

An SVI shows status down/down even though it is configured. What could be wrong?

Switching and VLANsHard
Save to ▾
Show answer
An SVI comes up only if the VLAN exists in the VLAN database and at least one access or trunk port in that VLAN is up and forwarding, and the SVI is not shut down. So I check show vlan brief for the VLAN, check that at least one port in it is connected, check trunks allow it, and run no shutdown on the SVI. On Layer 3 switches, ip routing must be enabled for routing.
20

What are the key elements of a security program for a network?

Network SecurityEasy
Save to ▾
Show answer
A security program combines user awareness training, physical access control, and technical controls such as strong authentication, firewalls, IPS, VPNs and patching. It is built around the CIA triad: confidentiality, integrity and availability. Policies define what is allowed, and logging and monitoring detect problems. CCNA focuses on device hardening, ACLs, Layer 2 security, AAA, VPNs and wireless security.
21

What are the first hop redundancy protocols and how does HSRP work?

Routing and OSPFMedium
Save to ▾
Show answer
FHRPs give hosts a virtual gateway IP shared by two or more routers. HSRP is proprietary: routers elect an active router by highest priority (default 100), and the standby takes over the virtual IP and MAC if hellos stop. Preempt lets a higher priority router reclaim the role. VRRP is the open standard, and GLBP adds load sharing across several routers.
22

A user complains the network is slow and the switch port shows many late collisions and CRC errors. What do you check?

Network FundamentalsMedium
Save to ▾
Show answer
Late collisions usually mean a duplex mismatch, and CRC errors point to bad cabling or interference. I would run show interfaces on the port to see duplex, speed and error counters, check the PC NIC settings, and set both sides to auto or hard-code both identically. Then I would replace the patch cable, clear counters and watch whether errors still increase.
23

How does a switch learn and forward frames?

Network FundamentalsMedium
Save to ▾
Show answer
A switch reads the source MAC of each incoming frame and records it with the port in the MAC address table. For forwarding it looks up the destination MAC: a known unicast goes out one port, while unknown unicast, broadcast and most multicast frames are flooded in the VLAN. Entries age out after 300 seconds by default. Check with show mac address-table.
24

How do you configure HSRP for a VLAN gateway?

Routing and OSPFMedium
Save to ▾
Show answer
Configure the same group and virtual IP on both switches, with higher priority on the active one. interface vlan 10 ip address 192.168.10.2 255.255.255.0 standby version 2 standby 10 ip 192.168.10.1 standby 10 priority 110 standby 10 preempt show standby brief Hosts use 192.168.10.1 as their gateway.
25

How do you make an access switch port a routed port on a Layer 3 switch?

Switching and VLANsHard
Save to ▾
Show answer
A routed port behaves like a router interface and does not belong to any VLAN. interface GigabitEthernet1/0/1 no switchport ip address 10.0.0.1 255.255.255.252 no shutdown Routed uplinks between distribution and core avoid spanning tree on those links and allow fast routing convergence with ECMP.
26

How do you configure an 802.1Q trunk securely?

Switching and VLANsMedium
Save to ▾
Show answer
Hard-code the trunk, disable negotiation, change the native VLAN and prune VLANs. interface GigabitEthernet1/0/48 switchport trunk encapsulation dot1q switchport mode trunk switchport nonegotiate switchport trunk native vlan 999 switchport trunk allowed vlan 10,20,30,99 show interfaces trunk
27

Tell me about a time you led a network migration or a major change.

Network FundamentalsHard
Save to ▾
Show answer
Situation: our office had to move 300 users from old access switches to a new stack in one weekend. Task: I owned the plan. Action: I documented every port, pre-built configs, ran a pilot on one floor, wrote a rollback plan and kept a call bridge open with the desktop team. Result: we finished two hours early with only three port issues, fixed on Monday morning. I learned that a tested rollback plan gives the whole team confidence.
28

What is VLSM and why is it used?

IP Addressing and SubnettingMedium
Save to ▾
Show answer
Variable Length Subnet Masking means using different prefix lengths inside one address block, so each subnet is sized to its need. You allocate the largest subnets first, then smaller ones, to avoid overlaps. For example, from 10.1.1.0/24 you could give a 100-user LAN a /25, a 50-user LAN a /26, and point-to-point WAN links /30 or /31. It saves address space compared with fixed-length subnetting.
29

Users suddenly receive IP addresses from a wrong subnet. What do you suspect and how do you fix it?

Network SecurityMedium
Save to ▾
Show answer
A rogue DHCP server, often a home router plugged into a wall port, is answering requests. I find it by checking the DHCP server IP on an affected client with ipconfig /all, then tracing its MAC with show mac address-table. I shut that port, and prevent it permanently by enabling DHCP snooping on user VLANs with only uplinks trusted.
30

How do you configure router-on-a-stick?

Switching and VLANsMedium
Save to ▾
Show answer
Use one trunk link and a subinterface per VLAN with 802.1Q encapsulation. interface GigabitEthernet0/0 no shutdown interface GigabitEthernet0/0.10 encapsulation dot1Q 10 ip address 192.168.10.1 255.255.255.0 interface GigabitEthernet0/0.20 encapsulation dot1Q 20 ip address 192.168.20.1 255.255.255.0 The switch port facing the router must be a trunk.
31

How do you configure PAT (NAT overload)?

IP ServicesMedium
Save to ▾
Show answer
Mark interfaces, match inside hosts with an ACL and overload the outside interface. interface GigabitEthernet0/1 ip nat inside interface GigabitEthernet0/0 ip nat outside access-list 1 permit 192.168.0.0 0.0.255.255 ip nat inside source list 1 interface GigabitEthernet0/0 overload show ip nat translations
32

How does DNS resolution work?

IP ServicesMedium
Save to ▾
Show answer
A client asks its configured resolver, for example for www.example.com. If it is not cached, the resolver queries a root server, which refers it to the .com TLD server, which refers it to the authoritative server for example.com, which returns the A or AAAA record. The answer is cached for its TTL. DNS uses UDP 53 for most queries and TCP 53 for zone transfers and large replies.
33

What is QoS and why is it needed?

IP ServicesMedium
Save to ▾
Show answer
Quality of Service gives different treatment to traffic types when links are congested. Voice needs low delay (under 150 ms one way), low jitter (under 30 ms) and low loss (under 1 percent), while bulk file transfer can wait. QoS tools classify and mark traffic, queue it with priority queues for voice, and police or shape rates. Without congestion QoS has no effect.
34

How do you configure an LACP EtherChannel trunk?

STP and EtherChannelMedium
Save to ▾
Show answer
Put members in a channel group with mode active, then configure the port-channel. interface range GigabitEthernet1/0/47 - 48 channel-group 1 mode active interface Port-channel1 switchport mode trunk switchport trunk allowed vlan 10,20,99 port-channel load-balance src-dst-ip show etherchannel summary
35

Traffic is not load balancing across two equal links even though both are in OSPF. What do you check?

Routing and OSPFHard
Save to ▾
Show answer
Both paths must have equal total cost to be installed as ECMP. I check show ip route for two next hops. If only one shows, I compare interface costs, which differ if bandwidth or the reference bandwidth differs. I also check maximum-paths. Even with ECMP, load sharing is per flow using CEF, so a single large flow uses one link only.
36

Where do you see yourself in five years in networking?

Wireless and AutomationEasy
Save to ▾
Show answer
Situation: I started with CCNA and a support role. Task: build a clear path. Action: I plan to master routing, switching and wireless in the next two years, pass CCNP Enterprise, and build automation skills in Python and Ansible alongside cloud networking. Result I aim for: a network engineer or architect role leading campus and SD-WAN projects, mentoring juniors and owning designs end to end.

Companies with offices in Gurgaon (6)

Consulting

Accenture

CCNA interview questions

  • 30 questions
  • 4 rounds

Bengaluru, Hyderabad, Pune +2

View questions
IT services

IBM

CCNA interview questions

  • 30 questions
  • 4 rounds

Bengaluru, Pune, Hyderabad +2

View questions
Telecom

Airtel

CCNA interview questions

  • 30 questions
  • 4 rounds

Gurugram, Bengaluru, Mumbai +1

View questions
Telecom

Ericsson

CCNA interview questions

  • 30 questions
  • 4 rounds

Gurugram, Bengaluru, Chennai +2

View questions
Telecom

Nokia

CCNA interview questions

  • 30 questions
  • 4 rounds

Bengaluru, Chennai, Noida +1

View questions
Product

Amazon

CCNA interview questions

  • 30 questions
  • 5 rounds

Bengaluru, Hyderabad, Chennai +2

View questions

Frequently asked questions

Which companies hire CCNA professionals in Gurgaon?

Companies with large offices in Gurgaon include Accenture, IBM, Airtel, Ericsson, Nokia, Amazon. Use their company pages below to practise employer-specific sets.

Are CCNA interviews in Gurgaon different from other cities?

The questions depend more on the company than the city. Gurgaon's mix of employers decides the style: Interviews often expect strong business understanding along with technical skills, especially for analytics and product-facing roles

How do I find CCNA jobs in Gurgaon?

Shortlist companies with Gurgaon offices, keep your CV focused on CCNA projects, apply on company career pages and job portals with the Gurgaon filter, and practise the questions on this page before each interview.

Other cities

DelhiNoidaBangaloreHyderabadPuneChennaiMumbaiKolkataAhmedabadJaipurLucknowChandigarhIndoreKochiCoimbatoreBhubaneswarNagpurVisakhapatnamThiruvananthapuram

More ways to practise

Company-wise CCNA questionsExperience-wise CCNA questionsRole-wise CCNA questionsCity-wise CCNA questionsMost asked CCNA questionsScenario-based questionsPractical / hands-on questionsHR & behavioural questionsCCNA mock interviewOnline assessment questionsTechnical round questionsManagerial round questionsCCNA topic sheets