Skip to content
CCNA
All coursesPlacement Report
‹ Back to previous sectionCourse homeAll page URLs

CCNA Interview Questions in Hyderabad

36 practice questions with answers for CCNA interviews in Hyderabad.

CCNA jobs in Hyderabad

Hyderabad has large engineering and capability centres of global technology, banking and pharma companies around HITEC City and the Financial District. Many roles are with global capability centres that work with teams in the US and Europe.

Below are 36 questions that match the mix of service, product and domain employers hiring network support engineers in Hyderabad.

Solved for HyderabadStart practicing
3 QUESTIONS FREESign up to unlock the full question bank and track your progress.Unlock every question and answer, then continue practising company-wise and package-wise.
3 questions free Unlock the rest in seconds
01

A PC can ping its default gateway but cannot open any website. How would you troubleshoot?

Network FundamentalsMedium
Save to ▾
Show answer
Gateway reachability proves Layers 1 to 3 locally, so I move upward. I ping a public IP address; if that works but names fail, DNS is the problem, so I check the configured DNS server with ipconfig /all and test with nslookup. If the public IP also fails, I check the router's default route, NAT and upstream link. Finally I check proxy settings and any firewall blocking ports 80 and 443.
02

How do you configure a router as a DHCP relay and verify it?

IP ServicesMedium
Save to ▾
Show answer
Add the helper address on the client-facing interface. interface vlan 20 ip helper-address 10.0.0.50 show ip interface vlan 20 | include Helper debug ip dhcp server packet The helper also forwards some other UDP broadcasts such as TFTP and DNS by default; use no ip forward-protocol udp to limit them.
03

What is a REST API and which HTTP methods map to CRUD?

Wireless and AutomationEasy
Save to ▾
Show answer
A REST API exposes resources at URLs and is stateless, usually with JSON payloads over HTTPS. CRUD maps to HTTP verbs: POST creates, GET reads, PUT replaces or PATCH partly updates, and DELETE removes. Responses use status codes such as 200 OK, 201 Created, 401 Unauthorized, 404 Not Found and 500 Server Error. Controllers expose northbound REST APIs for automation.
04

A broadcast storm brought the network down after someone connected a cable between two wall ports. How do you prevent this?

STP and EtherChannelMedium
Save to ▾
Show answer
Two wall ports patched to the same switch formed a loop. To stop it now, I find the port with rising broadcast counters and shut it. To prevent repeats, enable PortFast with BPDU Guard on all access ports, keep Rapid PVST+ running everywhere, add storm-control broadcast thresholds on access ports and enable errdisable recovery with a sensible interval.
05

What is the difference between policing and shaping?

IP ServicesHard
Save to ▾
Show answer
Policing drops or re-marks traffic that exceeds a rate immediately, with no buffering, so it causes TCP retransmissions; it is used inbound or by ISPs. Shaping buffers excess traffic and sends it later, smoothing bursts to a configured rate at the cost of delay; it is used outbound, for example to match a 100 Mbps subscription on a 1 Gbps port.
06

How do you configure router-on-a-stick?

Switching and VLANsMedium
Save to ▾
Show answer
Use one trunk link and a subinterface per VLAN with 802.1Q encapsulation. interface GigabitEthernet0/0 no shutdown interface GigabitEthernet0/0.10 encapsulation dot1Q 10 ip address 192.168.10.1 255.255.255.0 interface GigabitEthernet0/0.20 encapsulation dot1Q 20 ip address 192.168.20.1 255.255.255.0 The switch port facing the router must be a trunk.
07

What is a voice VLAN and how does it work?

Switching and VLANsMedium
Save to ▾
Show answer
A voice VLAN lets an IP phone and a PC share one switch port while keeping their traffic separate. The port is an access port in the data VLAN, and the switch tells the phone through CDP or LLDP-MED to tag voice frames with the voice VLAN. This allows QoS priority for voice and separate addressing. Configure it with switchport voice vlan.
08

Tell me about a time you solved a difficult network outage.

Network FundamentalsMedium
Save to ▾
Show answer
Situation: a branch lost access to the data center during month-end close. Task: restore service fast. Action: I worked bottom-up, found the WAN link up but OSPF stuck in EXSTART, and traced it to an MTU change by the provider. I set ip ospf mtu-ignore as a temporary fix and raised a ticket for the MTU. Result: service was back in 25 minutes and I documented the check in our runbook.
09

Tell me about a time you had to learn a new technology quickly.

STP and EtherChannelMedium
Save to ▾
Show answer
Situation: our team moved from PVST to MST for a data center with 600 VLANs, and I had not used MST. Task: be ready for the migration in two weeks. Action: I read the configuration guides, built the design in a GNS3 lab, broke it deliberately and wrote a step-by-step checklist. Result: the migration ran in one window without outage, and I ran a short knowledge session for the team.
10

An internal web server must be reachable from the internet on a public IP. How do you set it up?

IP ServicesMedium
Save to ▾
Show answer
Use static NAT or port forwarding so the public IP maps to the server's private IP, for example ip nat inside source static tcp 192.168.1.20 443 203.0.113.10 443. Add an ACL or firewall rule allowing only port 443 inbound, put the server in a DMZ VLAN, and create a public DNS record. Ideally place a firewall or reverse proxy in front instead of exposing the server directly.
11

How do you configure an LACP EtherChannel trunk?

STP and EtherChannelMedium
Save to ▾
Show answer
Put members in a channel group with mode active, then configure the port-channel. interface range GigabitEthernet1/0/47 - 48 channel-group 1 mode active interface Port-channel1 switchport mode trunk switchport trunk allowed vlan 10,20,99 port-channel load-balance src-dst-ip show etherchannel summary
12

Where do you see yourself in five years in networking?

Wireless and AutomationEasy
Save to ▾
Show answer
Situation: I started with CCNA and a support role. Task: build a clear path. Action: I plan to master routing, switching and wireless in the next two years, pass CCNP Enterprise, and build automation skills in Python and Ansible alongside cloud networking. Result I aim for: a network engineer or architect role leading campus and SD-WAN projects, mentoring juniors and owning designs end to end.
13

What is the difference between site-to-site and remote-access VPNs?

Network SecurityMedium
Save to ▾
Show answer
A site-to-site VPN connects whole networks, usually two routers or firewalls, using an always-on IPsec tunnel, so users do not need any client. A remote-access VPN connects individual users from laptops or phones to the company network using a client with TLS or IPsec, and authenticates each user. Both encrypt traffic over the internet to provide confidentiality and integrity.
14

What must match for an EtherChannel to form?

STP and EtherChannelMedium
Save to ▾
Show answer
Member interfaces must have the same speed and duplex, the same mode (access or trunk), the same access VLAN or the same native and allowed VLAN list on trunks, and compatible negotiation modes. Mismatched settings put members into suspended state. Configure settings on the port-channel interface so they are pushed to members, and verify with show etherchannel summary.
15

Why does OSPF use areas and what is area 0?

Routing and OSPFMedium
Save to ▾
Show answer
Areas limit how far detailed LSAs flood, so SPF runs on a smaller database and changes in one area do not force recalculation everywhere. Area 0 is the backbone and every other area must connect to it, directly or through a virtual link. Routers connecting areas are ABRs and can summarize routes between areas. Single-area OSPF is the focus of CCNA.
16

What are the main 802.11 Wi-Fi standards?

Wireless and AutomationEasy
Save to ▾
Show answer
802.11n (Wi-Fi 4) works on 2.4 and 5 GHz with MIMO. 802.11ac (Wi-Fi 5) is 5 GHz only with wider channels and MU-MIMO downlink. 802.11ax (Wi-Fi 6 and 6E) adds OFDMA, BSS colouring and target wake time, and 6E adds the 6 GHz band. 802.11be (Wi-Fi 7) adds 320 MHz channels and multi-link operation. India opened part of the 6 GHz band for indoor use.
17

Users complain Wi-Fi is slow in a conference room with 60 people. What do you check and fix?

Wireless and AutomationMedium
Save to ▾
Show answer
This is usually a capacity, not a coverage, issue. I check client count per AP and channel utilisation on the controller. Fixes include adding APs with lower transmit power, steering clients to 5 or 6 GHz with band steering, disabling low data rates such as 1, 2 and 5.5 Mbps, using 20 or 40 MHz channels in dense areas, and limiting per-client bandwidth on the SSID.
18

What is a wildcard mask and how is it used in ACLs?

Network SecurityMedium
Save to ▾
Show answer
A wildcard mask tells the router which bits must match: 0 means must match and 1 means ignore. It is often the inverse of the subnet mask, so 192.168.1.0 0.0.0.255 matches the whole /24. host 10.1.1.1 equals 0.0.0.0 and any equals 255.255.255.255. Wildcards are also used in OSPF network statements. Calculate it by subtracting the mask from 255.255.255.255.
19

How is the OSPF router ID chosen?

Routing and OSPFEasy
Save to ▾
Show answer
The router ID is a 32-bit value chosen in this order: manually configured router-id, then the highest IP on an up loopback interface, then the highest IP on an up physical interface. It is chosen when the OSPF process starts, so changes need clear ip ospf process. Best practice is to set it manually so it is stable and easy to recognise in the database.
20

What is MST and when would you use it?

STP and EtherChannelHard
Save to ▾
Show answer
Multiple Spanning Tree (802.1s) maps many VLANs to a small number of STP instances, so a switch does not run one instance per VLAN as PVST does. Switches in the same MST region must share the name, revision and VLAN-to-instance mapping. It suits large networks with hundreds of VLANs and multi-vendor environments, and supports load sharing by making different instances root on different switches.
21

How does DHCP work?

IP ServicesEasy
Save to ▾
Show answer
DHCP uses the DORA process: the client broadcasts Discover, the server answers with an Offer, the client broadcasts a Request for that offer, and the server confirms with an Acknowledgement. The lease includes IP, mask, gateway, DNS servers and lease time. Clients renew at 50 percent of the lease. DHCP uses UDP ports 67 for the server and 68 for the client.
22

What are the data plane, control plane and management plane?

Wireless and AutomationEasy
Save to ▾
Show answer
The data plane forwards packets, using tables such as the FIB and MAC table, ideally in hardware. The control plane builds those tables using protocols like OSPF, STP and ARP. The management plane is how admins and tools interact with the device, through SSH, SNMP, syslog and APIs. Separating them helps understanding of SDN, where the control plane can be centralised.
23

What is route summarization and how do you calculate a summary?

IP Addressing and SubnettingMedium
Save to ▾
Show answer
Summarization advertises one prefix that covers several contiguous networks, shrinking routing tables and hiding instability. Write the networks in binary and keep the common leading bits. For 10.1.4.0/24 to 10.1.7.0/24, the third octet values 4 to 7 share the first six bits (000001), so the summary is 10.1.4.0/22. Make sure the summary does not include networks that live elsewhere.
24

What is QoS and why is it needed?

IP ServicesMedium
Save to ▾
Show answer
Quality of Service gives different treatment to traffic types when links are congested. Voice needs low delay (under 150 ms one way), low jitter (under 30 ms) and low loss (under 1 percent), while bulk file transfer can wait. QoS tools classify and mark traffic, queue it with priority queues for voice, and police or shape rates. Without congestion QoS has no effect.
25

Compare WPA2 and WPA3 security.

Wireless and AutomationMedium
Save to ▾
Show answer
WPA2 uses AES-CCMP; WPA2-Personal uses a pre-shared key that is vulnerable to offline dictionary attacks, and WPA2-Enterprise uses 802.1X with RADIUS. WPA3-Personal replaces PSK with SAE, which resists offline guessing and gives forward secrecy. WPA3-Enterprise offers a 192-bit mode. WPA3 requires protected management frames. Open networks can use OWE for encryption without passwords.
26

How do you handle pressure when an outage affects many users?

IP ServicesEasy
Save to ▾
Show answer
Situation: DHCP failed for 300 users at 9 a.m. on a Monday. Task: restore service while keeping managers updated. Action: I stayed calm, followed the bottom-up method, found the DHCP server's scope was full after a lease time change, extended the scope and shortened leases. I sent updates every 15 minutes. Result: users were back in 30 minutes, and we added scope utilisation alerts to monitoring.
27

Explain root port, designated port and blocked port.

STP and EtherChannelMedium
Save to ▾
Show answer
Every non-root switch picks one root port, its best path to the root based on lowest root path cost, then lowest sender bridge ID, then lowest sender port ID. On each segment, the switch with the best path becomes the designated port and forwards. Every remaining port becomes non-designated and blocks. All ports on the root bridge are designated.
28

Your company is running out of IP addresses on a /24 user subnet. What options do you have?

IP Addressing and SubnettingMedium
Save to ▾
Show answer
Options: expand to a /23 if the adjacent block is free and update the router and DHCP scope; create a new VLAN and subnet for some users, which also limits broadcast size; shorten DHCP lease times if many guest devices hold leases; and move printers, phones and IoT devices to their own subnets. Long term, plan an addressing scheme with growth headroom and consider dual-stack IPv6.
29

What is a private VLAN?

Switching and VLANsHard
Save to ▾
Show answer
A private VLAN splits one VLAN into a primary VLAN and secondary VLANs. Isolated ports can talk only to promiscuous ports such as the gateway, while community ports can talk to each other and to promiscuous ports. It is used in hosting, DMZs and hotel networks to isolate customers on the same subnet without creating many subnets. It requires VTP transparent mode or VTP v3.
30

What are the seven layers of the OSI model?

Network FundamentalsEasy
Save to ▾
Show answer
From bottom to top: Physical, Data Link, Network, Transport, Session, Presentation and Application. Each layer serves the one above it. For example, Ethernet frames work at Layer 2, IP packets at Layer 3 and TCP segments at Layer 4. Engineers use the model to troubleshoot bottom-up: check cables and link lights first, then MAC learning, then IP reachability.
31

Users on a new floor report no network connectivity at all and the switch port LEDs are off. What is your approach?

Network FundamentalsEasy
Save to ▾
Show answer
No link light means a Layer 1 problem. I verify the switch has power and the ports are not administratively shut down with show ip interface brief. I test the cable with a tester, check the patch panel mapping and confirm the NIC is enabled. If the switch uses PoE for phones or access points, I also check the power budget with show power inline.
32

Traffic is taking a slow path because an old access switch became root bridge. How do you fix it?

STP and EtherChannelMedium
Save to ▾
Show answer
The old switch has the lowest MAC with default priority, so it won the election. I set the core or distribution switch as root with spanning-tree vlan 1-4094 priority 4096, or root primary, and the secondary with 8192. I add Root Guard on distribution downlinks so access switches can never become root again. Then I verify with show spanning-tree root.
33

What is EUI-64 and how is the interface ID generated?

IP Addressing and SubnettingHard
Save to ▾
Show answer
EUI-64 builds a 64-bit interface ID from a 48-bit MAC. Split the MAC in half, insert FFFE in the middle and flip the seventh bit of the first byte. For MAC 0050.56AB.CDEF the ID becomes 0250:56FF:FEAB:CDEF. Routers can use ipv6 address 2001:db8:1::/64 eui-64. Hosts often prefer random privacy addresses instead, to avoid exposing the MAC.
34

Two hosts are in the same VLAN but one has mask /24 and the other /25. What problems may occur?

IP Addressing and SubnettingMedium
Save to ▾
Show answer
Each host decides local or remote using its own mask. With 192.168.1.10/24 and 192.168.1.200/25, the first thinks .200 is local and ARPs directly, but the second sees .10 as remote and sends replies to its gateway. Traffic can become one-way or asymmetric and may break completely if the gateway does not route it back. Fix the mask so both match the design.
35

How is OSPF cost calculated?

Routing and OSPFMedium
Save to ▾
Show answer
Cost equals reference bandwidth divided by interface bandwidth. The default reference is 100 Mbps, so FastEthernet, Gigabit and 10 Gigabit all get cost 1, which hides the faster links. Change it with auto-cost reference-bandwidth 100000 on every router so 1G becomes 100 and 10G becomes 10. You can also set ip ospf cost directly on an interface. Path cost is the sum of outgoing interface costs.
36

You have 192.168.10.0/24 and need subnets for 100, 50, 20 hosts and two point-to-point links. Design it with VLSM.

IP Addressing and SubnettingMedium
Save to ▾
Show answer
Allocate largest first so blocks align. 100 hosts -> /25: 192.168.10.0/25 (.1 - .126) 50 hosts -> /26: 192.168.10.128/26 (.129 - .190) 20 hosts -> /27: 192.168.10.192/27 (.193 - .222) Link 1 -> /30: 192.168.10.224/30 Link 2 -> /30: 192.168.10.228/30 Free for growth: 192.168.10.232 - .255

Companies with offices in Hyderabad (14)

IT services

TCS

CCNA interview questions

  • 30 questions
  • 4 rounds

Mumbai, Chennai, Pune +2

View questions
IT services

Infosys

CCNA interview questions

  • 30 questions
  • 4 rounds

Bengaluru, Mysuru, Pune +2

View questions
IT services

Wipro

CCNA interview questions

  • 30 questions
  • 4 rounds

Bengaluru, Hyderabad, Pune +2

View questions
IT services

HCLTech

CCNA interview questions

  • 30 questions
  • 4 rounds

Noida, Chennai, Bengaluru +2

View questions
IT services

Tech Mahindra

CCNA interview questions

  • 30 questions
  • 4 rounds

Pune, Hyderabad, Bengaluru +2

View questions
Consulting

Accenture

CCNA interview questions

  • 30 questions
  • 4 rounds

Bengaluru, Hyderabad, Pune +2

View questions
IT services

Cognizant

CCNA interview questions

  • 30 questions
  • 4 rounds

Chennai, Bengaluru, Pune +2

View questions
IT services

Capgemini

CCNA interview questions

  • 30 questions
  • 4 rounds

Mumbai, Bengaluru, Pune +2

View questions
IT services

IBM

CCNA interview questions

  • 30 questions
  • 4 rounds

Bengaluru, Pune, Hyderabad +2

View questions
Telecom

Jio Platforms

CCNA interview questions

  • 30 questions
  • 4 rounds

Navi Mumbai, Bengaluru, Hyderabad

View questions
IT services

NTT DATA

CCNA interview questions

  • 30 questions
  • 4 rounds

Bengaluru, Pune, Noida +2

View questions
Hardware & semiconductors

Dell Technologies

CCNA interview questions

  • 30 questions
  • 5 rounds

Bengaluru, Hyderabad

View questions
IT services

LTIMindtree

CCNA interview questions

  • 30 questions
  • 4 rounds

Mumbai, Pune, Bengaluru +2

View questions
Product

Amazon

CCNA interview questions

  • 30 questions
  • 5 rounds

Bengaluru, Hyderabad, Chennai +2

View questions

Frequently asked questions

Which companies hire CCNA professionals in Hyderabad?

Companies with large offices in Hyderabad include TCS, Infosys, Wipro, HCLTech, Tech Mahindra, Accenture, Cognizant, Capgemini, IBM, Jio Platforms. Use their company pages below to practise employer-specific sets.

Are CCNA interviews in Hyderabad different from other cities?

The questions depend more on the company than the city. Hyderabad's mix of employers decides the style: Many roles are with global capability centres that work with teams in the US and Europe

How do I find CCNA jobs in Hyderabad?

Shortlist companies with Hyderabad offices, keep your CV focused on CCNA projects, apply on company career pages and job portals with the Hyderabad filter, and practise the questions on this page before each interview.

Other cities

DelhiNoidaGurgaonBangalorePuneChennaiMumbaiKolkataAhmedabadJaipurLucknowChandigarhIndoreKochiCoimbatoreBhubaneswarNagpurVisakhapatnamThiruvananthapuram

More ways to practise

Company-wise CCNA questionsExperience-wise CCNA questionsRole-wise CCNA questionsCity-wise CCNA questionsMost asked CCNA questionsScenario-based questionsPractical / hands-on questionsHR & behavioural questionsCCNA mock interviewOnline assessment questionsTechnical round questionsManagerial round questionsCCNA topic sheets