Skip to content
CCNA
All coursesPlacement Report
‹ Back to previous sectionCourse homeAll page URLs

CCNA Interview Questions in Noida

36 practice questions with answers for CCNA interviews in Noida.

CCNA jobs in Noida

Noida is a major IT and IT-services hub in Delhi NCR with large campuses of service companies, product firms and fast-growing start-ups along the Noida–Greater Noida Expressway. Freshers often find their first role here, and many teams run hybrid work.

Below are 36 questions that match the mix of service, product and domain employers hiring network support engineers in Noida.

Solved for NoidaStart practicing
3 QUESTIONS FREESign up to unlock the full question bank and track your progress.Unlock every question and answer, then continue practising company-wise and package-wise.
3 questions free Unlock the rest in seconds
01

How is OSPF cost calculated?

Routing and OSPFMedium
Save to ▾
Show answer
Cost equals reference bandwidth divided by interface bandwidth. The default reference is 100 Mbps, so FastEthernet, Gigabit and 10 Gigabit all get cost 1, which hides the faster links. Change it with auto-cost reference-bandwidth 100000 on every router so 1G becomes 100 and 10G becomes 10. You can also set ip ospf cost directly on an interface. Path cost is the sum of outgoing interface costs.
02

How do you configure a router as a DHCP relay and verify it?

IP ServicesMedium
Save to ▾
Show answer
Add the helper address on the client-facing interface. interface vlan 20 ip helper-address 10.0.0.50 show ip interface vlan 20 | include Helper debug ip dhcp server packet The helper also forwards some other UDP broadcasts such as TFTP and DNS by default; use no ip forward-protocol udp to limit them.
03

What are DR and BDR in OSPF and why are they needed?

Routing and OSPFMedium
Save to ▾
Show answer
On multi-access networks such as Ethernet, a full mesh of adjacencies would create too many LSAs. OSPF elects a Designated Router and Backup DR; other routers (DROTHERs) form full adjacency only with them and stay 2-Way with each other. The highest interface priority wins, then highest router ID; priority 0 means never DR. Election is non-preemptive, so a new better router does not take over.
04

What is the difference between site-to-site and remote-access VPNs?

Network SecurityMedium
Save to ▾
Show answer
A site-to-site VPN connects whole networks, usually two routers or firewalls, using an always-on IPsec tunnel, so users do not need any client. A remote-access VPN connects individual users from laptops or phones to the company network using a client with TLS or IPsec, and authenticates each user. Both encrypt traffic over the internet to provide confidentiality and integrity.
05

How do you configure HSRP for a VLAN gateway?

Routing and OSPFMedium
Save to ▾
Show answer
Configure the same group and virtual IP on both switches, with higher priority on the active one. interface vlan 10 ip address 192.168.10.2 255.255.255.0 standby version 2 standby 10 ip 192.168.10.1 standby 10 priority 110 standby 10 preempt show standby brief Hosts use 192.168.10.1 as their gateway.
06

How do you configure an 802.1Q trunk securely?

Switching and VLANsMedium
Save to ▾
Show answer
Hard-code the trunk, disable negotiation, change the native VLAN and prune VLANs. interface GigabitEthernet1/0/48 switchport trunk encapsulation dot1q switchport mode trunk switchport nonegotiate switchport trunk native vlan 999 switchport trunk allowed vlan 10,20,30,99 show interfaces trunk
07

Tell me about a time you took initiative beyond your assigned work.

Wireless and AutomationMedium
Save to ▾
Show answer
Situation: our team got many Wi-Fi complaints but had no data. Task: nobody had asked, but I wanted to find the cause. Action: I did a walk-through survey with a free tool, mapped channels and signal, and found three APs on the same 2.4 GHz channel and one dead AP. I shared a short report with fixes. Result: after the changes, Wi-Fi tickets dropped by about 60 percent in a month.
08

Users complain Wi-Fi is slow in a conference room with 60 people. What do you check and fix?

Wireless and AutomationMedium
Save to ▾
Show answer
This is usually a capacity, not a coverage, issue. I check client count per AP and channel utilisation on the controller. Fixes include adding APs with lower transmit power, steering clients to 5 or 6 GHz with band steering, disabling low data rates such as 1, 2 and 5.5 Mbps, using 20 or 40 MHz channels in dense areas, and limiting per-client bandwidth on the SSID.
09

How do you check interface status and errors on an IOS device?

Network FundamentalsEasy
Save to ▾
Show answer
show ip interface brief gives status and IP of all interfaces, and show interfaces gives counters and duplex. Router# show ip interface brief Router# show interfaces GigabitEthernet0/1 Router# show interfaces status Router# clear counters GigabitEthernet0/1 Status up/down means Layer 1 is up but Layer 2 keepalives fail; administratively down means the interface is shut.
10

How do you back up and restore a device configuration?

IP ServicesMedium
Save to ▾
Show answer
Copy the config to a server and back. copy running-config tftp://10.0.0.40/R1-backup.cfg copy running-config scp://admin@10.0.0.40/R1.cfg copy tftp://10.0.0.40/R1-backup.cfg running-config configure replace flash:R1-good.cfg archive path flash:R1-archive write-memory configure replace gives a clean rollback instead of merging.
11

How are ACL entries processed and what is the implicit deny?

Network SecurityEasy
Save to ▾
Show answer
ACL entries are checked top-down and the first match decides permit or deny; later lines are ignored. Every ACL ends with an invisible deny any, so traffic that matches no line is dropped. Therefore specific entries must come before general ones, and an ACL with only deny statements blocks everything. Always add a permit for allowed traffic and test after applying.
12

How do you configure SSH access on a switch or router?

Network FundamentalsMedium
Save to ▾
Show answer
SSH needs a hostname, domain name, RSA keys, a local user and VTY lines restricted to SSH. hostname R1 ip domain-name lab.local crypto key generate rsa modulus 2048 ip ssh version 2 username admin privilege 15 secret Adm1nPass line vty 0 4 login local transport input ssh
13

What is route summarization and how do you calculate a summary?

IP Addressing and SubnettingMedium
Save to ▾
Show answer
Summarization advertises one prefix that covers several contiguous networks, shrinking routing tables and hiding instability. Write the networks in binary and keep the common leading bits. For 10.1.4.0/24 to 10.1.7.0/24, the third octet values 4 to 7 share the first six bits (000001), so the summary is 10.1.4.0/22. Make sure the summary does not include networks that live elsewhere.
14

How does a router choose the best route to a destination?

Routing and OSPFEasy
Save to ▾
Show answer
First it uses longest prefix match: the most specific matching prefix wins, so 10.1.1.0/24 beats 10.1.0.0/16. If the same prefix comes from different sources, the lowest administrative distance wins. If the same protocol offers several paths, the lowest metric wins, and equal metrics can be load-balanced with ECMP. Only the winners are installed in the routing table.
15

A user's port keeps going into err-disabled state. How do you investigate?

Network SecurityEasy
Save to ▾
Show answer
I run show interfaces status err-disabled and show errdisable recovery to see the cause, such as psecure-violation, bpduguard or link-flap. If it is port security, the user may have plugged in a small switch or a docking station with an extra MAC, so I check show port-security interface. I fix the cause, then shut and no shut the port, or set the max MAC count appropriately.
16

What is AAA and the difference between TACACS+ and RADIUS?

Network SecurityMedium
Save to ▾
Show answer
AAA stands for Authentication (who you are), Authorization (what you can do) and Accounting (what you did). TACACS+ uses TCP 49, encrypts the whole payload and separates authentication from authorization, so it is preferred for device administration with per-command control. RADIUS uses UDP 1812 and 1813, encrypts only the password and is used for network access such as 802.1X and VPN.
17

Describe a situation where you had to explain a technical issue to a non-technical manager.

Routing and OSPFMedium
Save to ▾
Show answer
Situation: a routing loop during a carrier change caused a two-hour outage and the operations head wanted an explanation. Task: explain cause and prevention simply. Action: I used a road map analogy, explained that two routers kept sending traffic to each other, showed the timeline and our fix, and listed three prevention steps with dates. Result: management approved a proper change review board, and trust in our team improved.
18

A new VLAN's users do not get DHCP addresses, but other VLANs work. What do you check?

IP ServicesMedium
Save to ▾
Show answer
I check that the SVI for the new VLAN is up and has ip helper-address pointing to the DHCP server, that the server has a scope for that subnet with the right gateway, and that the scope is activated. I confirm the VLAN is allowed on trunks. If DHCP snooping is enabled, I check the uplink is trusted, otherwise offers from the server are dropped.
19

A trunk between two switches is not forming. What would you check?

Switching and VLANsMedium
Save to ▾
Show answer
I check show interfaces trunk and show interfaces switchport on both sides. Common causes are mismatched modes (both dynamic auto), one side hard-coded as access, encapsulation not set on older switches, or the port being err-disabled. Native VLAN mismatch and allowed list differences do not stop the trunk but break traffic. Best fix is switchport mode trunk on both ends with nonegotiate.
20

Users can connect to the corporate SSID but get no IP address. What do you check?

Wireless and AutomationMedium
Save to ▾
Show answer
Association works, so the issue is between the AP or WLC and DHCP. I check the WLAN is mapped to the right dynamic interface and VLAN, that the VLAN is allowed on the WLC and AP trunks, and that DHCP relay or helper is set on the VLAN gateway. In FlexConnect local switching, I check the AP switchport trunk and VLAN mapping. Finally I check the DHCP scope.
21

Describe a time you made a configuration mistake. How did you handle it?

IP Addressing and SubnettingMedium
Save to ▾
Show answer
Situation: I applied a /25 mask instead of /24 on a core VLAN interface during a change window. Task: fix it fast and own the error. Action: monitoring alerted on half the users, I checked my change, corrected the mask within ten minutes and informed my lead immediately. Result: impact was short, and I added a peer-review step and a pre-written rollback to every change plan afterwards.
22

What is a Layer 3 switch and how is it different from a router?

Switching and VLANsMedium
Save to ▾
Show answer
A Layer 3 switch forwards packets between VLANs in hardware using SVIs or routed ports, giving very high throughput with many Ethernet ports. A router usually has fewer ports but richer WAN features such as NAT, VPN, deep QoS, varied WAN interfaces and large routing tables. In campuses, Layer 3 switches handle inter-VLAN routing while routers or firewalls handle the edge.
23

What is 802.1Q tagging?

Switching and VLANsEasy
Save to ▾
Show answer
802.1Q inserts a 4-byte tag after the source MAC in the Ethernet frame. The tag holds a 12-bit VLAN ID (1 to 4094 usable), 3 priority bits used by CoS for QoS, and a DEI bit. The tag is added when a frame leaves a trunk and removed at an access port. Older ISL encapsulation is obsolete; modern switches support only 802.1Q.
24

Which commands would you use to test end-to-end reachability and find where packets stop?

Network FundamentalsMedium
Save to ▾
Show answer
ping tests reachability and round-trip time, and traceroute shows each Layer 3 hop. R1# ping 10.2.2.2 source Loopback0 R1# traceroute 10.2.2.2 PC> tracert 10.2.2.2 An extended ping lets you set source, size and the DF bit to test MTU. Where traceroute shows asterisks, that hop is dropping or filtering ICMP.
25

How do you write a simple Python script to fetch interface data from a device?

Wireless and AutomationMedium
Save to ▾
Show answer
Netmiko handles SSH sessions; keep credentials in a file or vault, not the script. import yaml from netmiko import ConnectHandler # r1.yml holds device_type, host, username, password with open('r1.yml') as f: device = yaml.safe_load(f) with ConnectHandler(**device) as conn: output = conn.send_command('show ip interface brief') print(output)
26

Users suddenly receive IP addresses from a wrong subnet. What do you suspect and how do you fix it?

Network SecurityMedium
Save to ▾
Show answer
A rogue DHCP server, often a home router plugged into a wall port, is answering requests. I find it by checking the DHCP server IP on an affected client with ipconfig /all, then tracing its MAC with show mac address-table. I shut that port, and prevent it permanently by enabling DHCP snooping on user VLANs with only uplinks trusted.
27

What are the default STP path costs for common link speeds?

STP and EtherChannelMedium
Save to ▾
Show answer
With short (802.1D revised) costs: 10 Mbps is 100, 100 Mbps is 19, 1 Gbps is 4 and 10 Gbps is 2. With the long pathcost method, 1 Gbps is 20000 and 10 Gbps is 2000, which distinguishes higher speeds. Root path cost is the sum of costs on ports toward the root, and the lowest total wins when choosing root ports.
28

An EtherChannel shows members in suspended state. What do you check?

STP and EtherChannelMedium
Save to ▾
Show answer
Suspended (s) usually means a configuration mismatch between members or with the far end. I compare speed, duplex, trunk mode, native VLAN and allowed VLANs on each member and the port-channel with show run interface, check LACP modes on both sides, and look at logs. I fix the config on the port-channel, then shut and no shut members so they rejoin. show etherchannel summary should show P flags.
29

How do you configure router-on-a-stick?

Switching and VLANsMedium
Save to ▾
Show answer
Use one trunk link and a subinterface per VLAN with 802.1Q encapsulation. interface GigabitEthernet0/0 no shutdown interface GigabitEthernet0/0.10 encapsulation dot1Q 10 ip address 192.168.10.1 255.255.255.0 interface GigabitEthernet0/0.20 encapsulation dot1Q 20 ip address 192.168.20.1 255.255.255.0 The switch port facing the router must be a trunk.
30

A broadcast storm brought the network down after someone connected a cable between two wall ports. How do you prevent this?

STP and EtherChannelMedium
Save to ▾
Show answer
Two wall ports patched to the same switch formed a loop. To stop it now, I find the port with rising broadcast counters and shut it. To prevent repeats, enable PortFast with BPDU Guard on all access ports, keep Rapid PVST+ running everywhere, add storm-control broadcast thresholds on access ports and enable errdisable recovery with a sensible interval.
31

Compare single-mode and multimode fiber.

Network FundamentalsMedium
Save to ▾
Show answer
Single-mode fiber has a small core (about 9 microns) and uses a laser, so it carries light over long distances, often 10 km or more. Multimode fiber has a larger core (50 or 62.5 microns), uses cheaper LED or VCSEL optics and suits shorter runs inside a building or data center, usually up to a few hundred metres at 10 Gbps. SFP modules must match the fiber type.
32

What is a spine-leaf architecture and why is it used in data centers?

Network FundamentalsMedium
Save to ▾
Show answer
In spine-leaf, every leaf switch connects to every spine switch, and servers connect only to leaves. Any server is therefore at most two hops from another, giving predictable latency and good east-west bandwidth. Capacity is added by adding spines or leaves. It usually runs Layer 3 with ECMP to use all links, instead of relying on spanning tree.
33

What are the STP port states and timers in classic 802.1D?

STP and EtherChannelMedium
Save to ▾
Show answer
States are blocking, listening, learning, forwarding and disabled. Timers are hello 2 seconds, forward delay 15 seconds and max age 20 seconds. A port moves from blocking through listening and learning, each 15 seconds, so convergence can take 30 to 50 seconds. That delay is why Rapid STP and PortFast are used in modern networks.
34

A host shows IP 169.254.12.5. What does this mean and what will you check?

IP Addressing and SubnettingEasy
Save to ▾
Show answer
169.254.x.x is an APIPA address, assigned when the host fails to get a DHCP lease. I would check that the port is up and in the correct VLAN, that the DHCP server has free addresses in the scope, and that the router interface for that VLAN has ip helper-address pointing to the server if the server is remote. Then I run ipconfig /renew and check server logs.
35

What is the difference between a two-tier and a three-tier campus design?

Network FundamentalsMedium
Save to ▾
Show answer
A three-tier design has access, distribution and core layers: access connects users, distribution aggregates access switches and applies policy, and the core provides fast transport between distribution blocks. A two-tier or collapsed-core design merges core and distribution, which suits small and medium campuses with fewer buildings. Three-tier scales better when there are many distribution blocks.
36

How do you configure inter-VLAN routing on a Layer 3 switch with SVIs?

Switching and VLANsMedium
Save to ▾
Show answer
Enable routing and create an SVI per VLAN as the gateway. ip routing interface vlan 10 ip address 192.168.10.1 255.255.255.0 ip helper-address 10.0.0.50 no shutdown interface vlan 20 ip address 192.168.20.1 255.255.255.0 no shutdown show ip route connected

Companies with offices in Noida (5)

IT services

HCLTech

CCNA interview questions

  • 30 questions
  • 4 rounds

Noida, Chennai, Bengaluru +2

View questions
IT services

Tech Mahindra

CCNA interview questions

  • 30 questions
  • 4 rounds

Pune, Hyderabad, Bengaluru +2

View questions
Telecom

Ericsson

CCNA interview questions

  • 30 questions
  • 4 rounds

Gurugram, Bengaluru, Chennai +2

View questions
Telecom

Nokia

CCNA interview questions

  • 30 questions
  • 4 rounds

Bengaluru, Chennai, Noida +1

View questions
IT services

NTT DATA

CCNA interview questions

  • 30 questions
  • 4 rounds

Bengaluru, Pune, Noida +2

View questions

Frequently asked questions

Which companies hire CCNA professionals in Noida?

Companies with large offices in Noida include HCLTech, Tech Mahindra, Ericsson, Nokia, NTT DATA. Use their company pages below to practise employer-specific sets.

Are CCNA interviews in Noida different from other cities?

The questions depend more on the company than the city. Noida's mix of employers decides the style: Freshers often find their first role here, and many teams run hybrid work

How do I find CCNA jobs in Noida?

Shortlist companies with Noida offices, keep your CV focused on CCNA projects, apply on company career pages and job portals with the Noida filter, and practise the questions on this page before each interview.

Other cities

DelhiGurgaonBangaloreHyderabadPuneChennaiMumbaiKolkataAhmedabadJaipurLucknowChandigarhIndoreKochiCoimbatoreBhubaneswarNagpurVisakhapatnamThiruvananthapuram

More ways to practise

Company-wise CCNA questionsExperience-wise CCNA questionsRole-wise CCNA questionsCity-wise CCNA questionsMost asked CCNA questionsScenario-based questionsPractical / hands-on questionsHR & behavioural questionsCCNA mock interviewOnline assessment questionsTechnical round questionsManagerial round questionsCCNA topic sheets