← All CCNP Flashcard Decks

Network Design and Security Flashcards

11 cards from real CCNP practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 11 Network Design and Security flashcards as text
  1. How many layers are recommended in the hierarchical campus network design model?

    Answer: 3

    Explanation: The hierarchical campus network design model recommends having three layers. This design consists of the core layer, distribution layer, and access layer. The core layer is responsible for high-speed switching and routing, connecting different buildings or campuses. The distribution layer provides connectivity between the core and access layers, handling traffic filtering and policy enforcement. The access layer connects end devices, such as computers and printers, to the network. Having three layers in the hierarchical model helps to improve network performance, scalability, and manageability.

  2. End-user PCs should be connected into which of the following hierarchical layers?

    Answer: Access layer

    Explanation: End-user PCs should be connected to the access layer of the hierarchical network design. The access layer is responsible for connecting end-user devices to the network. It provides local network access, authentication, and security services. This layer is also responsible for implementing policies and controlling user access to network resources. By connecting end-user PCs to the access layer, network administrators can efficiently manage and control network traffic, ensuring that end-users have the necessary access to resources while maintaining network security and performance.

  3. In which OSI layer should devices in the distribution layer typically operate?

    Answer: Layer 3

    Explanation: Devices in the distribution layer typically operate at Layer 3 of the OSI model. Layer 3, also known as the network layer, is responsible for routing packets across different networks. The distribution layer connects different LANs or VLANs and performs functions like routing, filtering, and policy-based traffic control. It ensures that packets are delivered to the correct destination network by examining IP addresses and making routing decisions. Therefore, devices in the distribution layer primarily operate at Layer 3 to facilitate inter-network communication.

  4. A hierarchical network’s distribution layer aggregates which of the following?

    Answer: Access-layer switches

    Explanation: A hierarchical network's distribution layer aggregates access-layer switches. The distribution layer is responsible for connecting the access layer to the core layer in a hierarchical network design. It acts as a central point for traffic distribution and provides services such as routing, filtering, and policy enforcement. By aggregating the access-layer switches, the distribution layer reduces the number of connections required to connect the access layer to the core layer, improving the scalability and manageability of the network.

  5. In the core layer of a hierarchical network, which of the following are aggregated?

    Answer: Distribution switches

    Explanation: In the core layer of a hierarchical network, distribution switches are aggregated. The core layer is responsible for moving large amounts of data quickly and efficiently. Distribution switches are used to aggregate traffic from access-layer switches and route it to the appropriate destination. They help to optimize network performance by distributing traffic across multiple paths and providing redundancy. Therefore, distribution switches play a crucial role in aggregating and managing the flow of data in the core layer of a hierarchical network.

  6. What is the purpose of breaking a campus network into a hierarchical design?

    Answer: To make the network predictable and scalable

    Explanation: Breaking a campus network into a hierarchical design helps in making the network predictable and scalable. This design allows for easy management and troubleshooting by dividing the network into smaller, manageable segments. It also helps in efficient allocation of resources and bandwidth, as well as easy expansion as the network grows. Additionally, a hierarchical design enables better performance and reduces the chances of network congestion by controlling the flow of traffic.

  7. In a properly designed hierarchical network, a broadcast from one PC is confined to what?

    Answer: One switch block

    Explanation: In a properly designed hierarchical network, a broadcast from one PC is confined to one switch block. This means that the broadcast traffic is limited to the specific area or segment of the network where the PC and the corresponding switch block are located. It does not propagate to the entire campus network, which helps to minimize network congestion and improve overall network performance.

  8. What is the maximum number of access-layer switches that can connect to a single distribution-layer switch?

    Answer: Limited only by the number of ports on the distribution-layer switch

    Explanation: The correct answer is "Limited only by the number of ports on the distribution-layer switch." This means that the maximum number of access-layer switches that can connect to a single distribution-layer switch is determined by the number of available ports on the distribution-layer switch. As long as there are enough ports on the distribution-layer switch, there is no specific limit to the number of access-layer switches that can be connected.

  9. A switch block should be sized according to what?

    Answer: The number of access-layer users

    Explanation: A switch block should be sized according to the number of access-layer users and a study of the traffic patterns and flows. The number of access-layer users is important because it determines the capacity needed to handle the network traffic. A study of the traffic patterns and flows helps to understand the data flow and identify potential bottlenecks or areas of high traffic, allowing for proper sizing of the switch block to ensure optimal performance and efficiency.

  10. How many distribution switches should be built into each switch block?

    Answer: 2

    Explanation: In order to ensure redundancy and avoid a single point of failure, it is recommended to have at least two distribution switches built into each switch block. This allows for load balancing and provides backup in case one switch fails. Having only one distribution switch would increase the risk of network downtime and potential disruptions. Having four or eight distribution switches would be excessive and unnecessary for most network setups, as it would result in increased complexity and cost without significant benefits.

  11. Which one of the following tasks is not an appropriate strategy for migrating an existing network into the Enterprise Composite Model?

    Answer: Identify distribution switches to connect the switch blocks

    Explanation: The task of identifying distribution switches to connect the switch blocks is not an appropriate strategy for migrating an existing network into the Enterprise Composite Model. The Enterprise Composite Model is a hierarchical network design that consists of access, distribution, and core layers. In this model, switch blocks are connected to distribution switches, which are then connected to the core layer. Therefore, the distribution switches should already be identified and in place before migrating the network into the Enterprise Composite Model.

How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy

Sources & references

Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy

  1. pearsonvue.com — Test delivery · verified Oct 2026
  2. cisco.com — Renewal, eligibility, fees, score release, time limit, score validity, retake fee · verified Oct 2026
  3. blogs.cisco.com — Exam information · verified Oct 2026