Skip to content
CCNA
All coursesPlacement Report
‹ Back to previous sectionCourse homeAll page URLs

CCNA Interview Questions in Pune

36 practice questions with answers for CCNA interviews in Pune.

CCNA jobs in Pune

Pune combines IT-services campuses in Hinjewadi and Kharadi with product, automotive and BFSI technology centres. It has a large mid-level job market for data and QA roles, and interviews are often practical and project-based.

Below are 36 questions that match the mix of service, product and domain employers hiring network support engineers in Pune.

Solved for PuneStart practicing
3 QUESTIONS FREESign up to unlock the full question bank and track your progress.Unlock every question and answer, then continue practising company-wise and package-wise.
3 questions free Unlock the rest in seconds
01

What is VTP and what are its risks?

Switching and VLANsMedium
Save to ▾
Show answer
VLAN Trunking Protocol shares VLAN definitions from a server switch to clients in the same VTP domain. Modes are server, client, transparent and off. The risk is that a switch with a higher configuration revision number can overwrite and wipe VLANs across the domain. Many networks use transparent mode or VTP version 3 with a primary server to avoid this.
02

How does DHCP work?

IP ServicesEasy
Save to ▾
Show answer
DHCP uses the DORA process: the client broadcasts Discover, the server answers with an Offer, the client broadcasts a Request for that offer, and the server confirms with an Acknowledgement. The lease includes IP, mask, gateway, DNS servers and lease time. Clients renew at 50 percent of the lease. DHCP uses UDP ports 67 for the server and 68 for the client.
03

What is the difference between a hub, a switch and a router?

Network FundamentalsEasy
Save to ▾
Show answer
A hub is a Layer 1 repeater: it floods every bit out of every port, so all ports share one collision domain. A switch is Layer 2: it learns MAC addresses and forwards frames only to the correct port, giving each port its own collision domain. A router is Layer 3: it forwards packets between IP networks and separates broadcast domains.
04

After moving DHCP to a new central server, remote PCs get addresses but IP phones fail to download their configuration. What do you check?

IP ServicesMedium
Save to ▾
Show answer
The phones need extra DHCP options that were probably not copied, such as option 150 or option 66 for the TFTP or call server and sometimes a voice VLAN option. Check the scope options on the new server, confirm the relay on each SVI points to it, and capture the DHCP offer to see which options arrive. Also verify the voice VLAN scope exists and that ACLs allow TFTP from the phone subnets to the call server.
05

What is a VLAN and why is it used?

Switching and VLANsEasy
Save to ▾
Show answer
A VLAN is a logical Layer 2 broadcast domain created on a switch, independent of physical location. VLANs separate users, voice, guests and servers, reduce broadcast traffic, and improve security because traffic between VLANs must pass through a router or Layer 3 switch where it can be filtered. For example, finance and guest Wi-Fi users can share switches but stay isolated.
06

How do you restrict SSH access to devices from only the management subnet?

Network SecurityMedium
Save to ▾
Show answer
Use a standard ACL on the VTY lines. ip access-list standard MGMT-ONLY permit 10.99.0.0 0.0.0.255 deny any log line vty 0 15 access-class MGMT-ONLY in transport input ssh exec-timeout 10 0 login block-for 120 attempts 3 within 60
07

What is the difference between an access port and a trunk port?

Switching and VLANsEasy
Save to ▾
Show answer
An access port belongs to one VLAN and carries untagged frames, typically to PCs, printers or servers. A trunk port carries traffic for many VLANs between switches, routers or hypervisors, adding an 802.1Q tag to identify each frame's VLAN, except the native VLAN which is sent untagged. Access ports can also carry a separate voice VLAN for IP phones.
08

Two hosts are in the same VLAN but one has mask /24 and the other /25. What problems may occur?

IP Addressing and SubnettingMedium
Save to ▾
Show answer
Each host decides local or remote using its own mask. With 192.168.1.10/24 and 192.168.1.200/25, the first thinks .200 is local and ARPs directly, but the second sees .10 as remote and sends replies to its gateway. Traffic can become one-way or asymmetric and may break completely if the gateway does not route it back. Fix the mask so both match the design.
09

Compare WPA2 and WPA3 security.

Wireless and AutomationMedium
Save to ▾
Show answer
WPA2 uses AES-CCMP; WPA2-Personal uses a pre-shared key that is vulnerable to offline dictionary attacks, and WPA2-Enterprise uses 802.1X with RADIUS. WPA3-Personal replaces PSK with SAE, which resists offline guessing and gives forward secrecy. WPA3-Enterprise offers a 192-bit mode. WPA3 requires protected management frames. Open networks can use OWE for encryption without passwords.
10

Which commands would you use to test end-to-end reachability and find where packets stop?

Network FundamentalsMedium
Save to ▾
Show answer
ping tests reachability and round-trip time, and traceroute shows each Layer 3 hop. R1# ping 10.2.2.2 source Loopback0 R1# traceroute 10.2.2.2 PC> tracert 10.2.2.2 An extended ping lets you set source, size and the DF bit to test MTU. Where traceroute shows asterisks, that hop is dropping or filtering ICMP.
11

What is SLAAC and how is it different from DHCPv6?

IP Addressing and SubnettingMedium
Save to ▾
Show answer
With SLAAC a host learns the /64 prefix from a router advertisement and builds its own interface ID, without a server. Stateless DHCPv6 adds extra options such as DNS while the address still comes from SLAAC. Stateful DHCPv6 assigns the address itself and keeps bindings, similar to DHCPv4. RA flags M (managed) and O (other config) tell hosts which method to use.
12

After adding a second internet router, some sessions break at the stateful firewall because return traffic uses the other exit. How do you fix it?

Routing and OSPFHard
Save to ▾
Show answer
This is asymmetric routing: the firewall sees only one direction of the flow and drops it. Make the path symmetric by using one active exit per prefix, for example HSRP or a higher OSPF default-route cost on the backup, and advertise inbound routes consistently with the same preference. If both links must be active, pair the firewalls with state sharing or use NAT per exit so return traffic comes back to the router that sent it.
13

How do you configure router-on-a-stick?

Switching and VLANsMedium
Save to ▾
Show answer
Use one trunk link and a subinterface per VLAN with 802.1Q encapsulation. interface GigabitEthernet0/0 no shutdown interface GigabitEthernet0/0.10 encapsulation dot1Q 10 ip address 192.168.10.1 255.255.255.0 interface GigabitEthernet0/0.20 encapsulation dot1Q 20 ip address 192.168.20.1 255.255.255.0 The switch port facing the router must be a trunk.
14

A Python script gets 401 errors when calling a controller REST API. What do you check?

Wireless and AutomationMedium
Save to ▾
Show answer
401 Unauthorized means authentication failed. I check the username and password or API key, whether a token must first be requested from an auth endpoint and sent in a header like X-Auth-Token, whether the token expired, and the exact header name and format. I test the same call with curl or an API client to separate script bugs from credential issues.
15

Tell me about a time you worked with a difficult end user during a ticket.

Switching and VLANsEasy
Save to ▾
Show answer
Situation: a senior manager was angry that his laptop lost network access before a client call. Task: fix it fast and calm him down. Action: I listened, gave a clear time estimate, found the port had been moved to a wrong VLAN in a recent change, corrected it and confirmed the call worked. Result: he was back online in ten minutes, and I added a port description check to our change process.
16

Describe a time you made a configuration mistake. How did you handle it?

IP Addressing and SubnettingMedium
Save to ▾
Show answer
Situation: I applied a /25 mask instead of /24 on a core VLAN interface during a change window. Task: fix it fast and own the error. Action: monitoring alerted on half the users, I checked my change, corrected the mask within ten minutes and informed my lead immediately. Result: impact was short, and I added a peer-review step and a pre-written rollback to every change plan afterwards.
17

How do you configure inter-VLAN routing on a Layer 3 switch with SVIs?

Switching and VLANsMedium
Save to ▾
Show answer
Enable routing and create an SVI per VLAN as the gateway. ip routing interface vlan 10 ip address 192.168.10.1 255.255.255.0 ip helper-address 10.0.0.50 no shutdown interface vlan 20 ip address 192.168.20.1 255.255.255.0 no shutdown show ip route connected
18

A user complains the network is slow and the switch port shows many late collisions and CRC errors. What do you check?

Network FundamentalsMedium
Save to ▾
Show answer
Late collisions usually mean a duplex mismatch, and CRC errors point to bad cabling or interference. I would run show interfaces on the port to see duplex, speed and error counters, check the PC NIC settings, and set both sides to auto or hard-code both identically. Then I would replace the patch cable, clear counters and watch whether errors still increase.
19

What is the difference between autonomous APs, controller-based APs and cloud-managed APs?

Wireless and AutomationMedium
Save to ▾
Show answer
Autonomous APs are configured one by one and suit very small sites. Lightweight APs are managed by a Wireless LAN Controller using CAPWAP tunnels, which centralises configuration, RF management and roaming, and suits campuses. Cloud-managed APs are configured from a cloud dashboard, ideal for many branches. Split-MAC means real-time functions stay on the AP while management sits on the controller.
20

Compare single-mode and multimode fiber.

Network FundamentalsMedium
Save to ▾
Show answer
Single-mode fiber has a small core (about 9 microns) and uses a laser, so it carries light over long distances, often 10 km or more. Multimode fiber has a larger core (50 or 62.5 microns), uses cheaper LED or VCSEL optics and suits shorter runs inside a building or data center, usually up to a few hundred metres at 10 Gbps. SFP modules must match the fiber type.
21

Users can connect to the corporate SSID but get no IP address. What do you check?

Wireless and AutomationMedium
Save to ▾
Show answer
Association works, so the issue is between the AP or WLC and DHCP. I check the WLAN is mapped to the right dynamic interface and VLAN, that the VLAN is allowed on the WLC and AP trunks, and that DHCP relay or helper is set on the VLAN gateway. In FlexConnect local switching, I check the AP switchport trunk and VLAN mapping. Finally I check the DHCP scope.
22

How is Rapid PVST+ different from classic STP?

STP and EtherChannelMedium
Save to ▾
Show answer
Rapid PVST+ runs 802.1w per VLAN. It uses a proposal and agreement handshake on point-to-point links so ports move to forwarding in under a second, instead of waiting on timers. It has port roles root, designated, alternate and backup, and states discarding, learning and forwarding. Alternate ports provide an instant backup root port. It is the default on most modern IOS switches.
23

Traffic is not load balancing across two equal links even though both are in OSPF. What do you check?

Routing and OSPFHard
Save to ▾
Show answer
Both paths must have equal total cost to be installed as ECMP. I check show ip route for two next hops. If only one shows, I compare interface costs, which differ if bandwidth or the reference bandwidth differs. I also check maximum-paths. Even with ECMP, load sharing is per flow using CEF, so a single large flow uses one link only.
24

What is a wildcard mask and how is it used in ACLs?

Network SecurityMedium
Save to ▾
Show answer
A wildcard mask tells the router which bits must match: 0 means must match and 1 means ignore. It is often the inverse of the subnet mask, so 192.168.1.0 0.0.0.255 matches the whole /24. host 10.1.1.1 equals 0.0.0.0 and any equals 255.255.255.255. Wildcards are also used in OSPF network statements. Calculate it by subtracting the mask from 255.255.255.255.
25

What is CAPWAP?

Wireless and AutomationMedium
Save to ▾
Show answer
Control and Provisioning of Wireless Access Points is the protocol between lightweight APs and the WLC. It builds two tunnels: a control tunnel on UDP 5246, encrypted with DTLS, and a data tunnel on UDP 5247 that carries client traffic in central switching mode. In FlexConnect or local switching mode, client data is switched locally at the AP instead of being tunnelled.
26

A PC can ping its default gateway but cannot open any website. How would you troubleshoot?

Network FundamentalsMedium
Save to ▾
Show answer
Gateway reachability proves Layers 1 to 3 locally, so I move upward. I ping a public IP address; if that works but names fail, DNS is the problem, so I check the configured DNS server with ipconfig /all and test with nslookup. If the public IP also fails, I check the router's default route, NAT and upstream link. Finally I check proxy settings and any firewall blocking ports 80 and 443.
27

What is QoS and why is it needed?

IP ServicesMedium
Save to ▾
Show answer
Quality of Service gives different treatment to traffic types when links are congested. Voice needs low delay (under 150 ms one way), low jitter (under 30 ms) and low loss (under 1 percent), while bulk file transfer can wait. QoS tools classify and mark traffic, queue it with priority queues for voice, and police or shape rates. Without congestion QoS has no effect.
28

What is the difference between policing and shaping?

IP ServicesHard
Save to ▾
Show answer
Policing drops or re-marks traffic that exceeds a rate immediately, with no buffering, so it causes TCP retransmissions; it is used inbound or by ISPs. Shaping buffers excess traffic and sends it later, smoothing bursts to a configured rate at the cost of delay; it is used outbound, for example to match a 100 Mbps subscription on a 1 Gbps port.
29

Tell me about a time you automated or simplified a repetitive task.

IP ServicesMedium
Save to ▾
Show answer
Situation: our team manually backed up 80 router configs each week. Task: save time and avoid missed backups. Action: I enabled the archive feature with time-period on each device and later wrote a small Python script with Netmiko to pull and store configs in Git. Result: weekly effort dropped from four hours to zero, and we could see config differences after every change.
30

Compare Ansible, Puppet and Chef for network automation.

Wireless and AutomationMedium
Save to ▾
Show answer
Ansible is agentless, uses SSH or APIs, writes playbooks in YAML and uses a push model, so it is the most popular for network devices. Puppet uses an agent, a declarative manifest language and a pull model. Chef uses Ruby-based recipes with an agent and pull model. Puppet and Chef are more common for servers. All support idempotent configuration management.
31

Explain the NAT terms inside local, inside global, outside local and outside global.

IP ServicesMedium
Save to ▾
Show answer
Inside local is the private address of an inside host, for example 192.168.1.10. Inside global is the public address that represents it outside, for example 203.0.113.5. Outside global is the real address of the remote host. Outside local is how the remote host appears to inside users, usually the same as outside global unless destination NAT is used. show ip nat translations displays these columns.
32

Describe a situation where you had to explain a technical issue to a non-technical manager.

Routing and OSPFMedium
Save to ▾
Show answer
Situation: a routing loop during a carrier change caused a two-hour outage and the operations head wanted an explanation. Task: explain cause and prevention simply. Action: I used a road map analogy, explained that two routers kept sending traffic to each other, showed the timeline and our fix, and listed three prevention steps with dates. Result: management approved a proper change review board, and trust in our team improved.
33

How do you make an access switch port a routed port on a Layer 3 switch?

Switching and VLANsHard
Save to ▾
Show answer
A routed port behaves like a router interface and does not belong to any VLAN. interface GigabitEthernet1/0/1 no switchport ip address 10.0.0.1 255.255.255.252 no shutdown Routed uplinks between distribution and core avoid spanning tree on those links and allow fast routing convergence with ECMP.
34

What is a collision domain and a broadcast domain?

Network FundamentalsMedium
Save to ▾
Show answer
A collision domain is a segment where two devices sending at the same time can collide; every switch port is its own collision domain, and with full duplex collisions do not occur. A broadcast domain is the set of devices that receive a Layer 2 broadcast. Routers and VLANs separate broadcast domains, so one VLAN equals one broadcast domain.
35

How does controller-based networking differ from traditional networking?

Wireless and AutomationMedium
Save to ▾
Show answer
Traditionally each device has its own control plane and is configured box by box. In controller-based or software-defined networking, a central controller holds the policy and pushes it to devices through southbound APIs such as NETCONF or OpenFlow, while applications talk to the controller through northbound REST APIs. This gives consistent configuration, automation and network-wide visibility.
36

After adding a new VLAN, users on one access switch cannot use it but others can. Why?

Switching and VLANsMedium
Save to ▾
Show answer
The most likely cause is the trunk to that switch does not allow the new VLAN, because someone configured an explicit allowed list. Check show interfaces trunk and add it with switchport trunk allowed vlan add 50, not without add, which would replace the list. Also confirm the VLAN exists on that switch with show vlan brief, especially if VTP is transparent.

Companies with offices in Pune (14)

IT services

TCS

CCNA interview questions

  • 30 questions
  • 4 rounds

Mumbai, Chennai, Pune +2

View questions
IT services

Infosys

CCNA interview questions

  • 30 questions
  • 4 rounds

Bengaluru, Mysuru, Pune +2

View questions
IT services

Wipro

CCNA interview questions

  • 30 questions
  • 4 rounds

Bengaluru, Hyderabad, Pune +2

View questions
IT services

Tech Mahindra

CCNA interview questions

  • 30 questions
  • 4 rounds

Pune, Hyderabad, Bengaluru +2

View questions
Consulting

Accenture

CCNA interview questions

  • 30 questions
  • 4 rounds

Bengaluru, Hyderabad, Pune +2

View questions
IT services

Cognizant

CCNA interview questions

  • 30 questions
  • 4 rounds

Chennai, Bengaluru, Pune +2

View questions
IT services

Capgemini

CCNA interview questions

  • 30 questions
  • 4 rounds

Mumbai, Bengaluru, Pune +2

View questions
IT services

IBM

CCNA interview questions

  • 30 questions
  • 4 rounds

Bengaluru, Pune, Hyderabad +2

View questions
Hardware & semiconductors

Cisco

CCNA interview questions

  • 30 questions
  • 5 rounds

Bengaluru, Pune, Chennai

View questions
Telecom

Airtel

CCNA interview questions

  • 30 questions
  • 4 rounds

Gurugram, Bengaluru, Mumbai +1

View questions
Telecom

Vodafone Idea

CCNA interview questions

  • 30 questions
  • 4 rounds

Mumbai, Pune

View questions
IT services

NTT DATA

CCNA interview questions

  • 30 questions
  • 4 rounds

Bengaluru, Pune, Noida +2

View questions
IT services

LTIMindtree

CCNA interview questions

  • 30 questions
  • 4 rounds

Mumbai, Pune, Bengaluru +2

View questions
Product

Amazon

CCNA interview questions

  • 30 questions
  • 5 rounds

Bengaluru, Hyderabad, Chennai +2

View questions

Frequently asked questions

Which companies hire CCNA professionals in Pune?

Companies with large offices in Pune include TCS, Infosys, Wipro, Tech Mahindra, Accenture, Cognizant, Capgemini, IBM, Cisco, Airtel. Use their company pages below to practise employer-specific sets.

Are CCNA interviews in Pune different from other cities?

The questions depend more on the company than the city. Pune's mix of employers decides the style: It has a large mid-level job market for data and QA roles, and interviews are often practical and project-based

How do I find CCNA jobs in Pune?

Shortlist companies with Pune offices, keep your CV focused on CCNA projects, apply on company career pages and job portals with the Pune filter, and practise the questions on this page before each interview.

Other cities

DelhiNoidaGurgaonBangaloreHyderabadChennaiMumbaiKolkataAhmedabadJaipurLucknowChandigarhIndoreKochiCoimbatoreBhubaneswarNagpurVisakhapatnamThiruvananthapuram

More ways to practise

Company-wise CCNA questionsExperience-wise CCNA questionsRole-wise CCNA questionsCity-wise CCNA questionsMost asked CCNA questionsScenario-based questionsPractical / hands-on questionsHR & behavioural questionsCCNA mock interviewOnline assessment questionsTechnical round questionsManagerial round questionsCCNA topic sheets