CCST Cheat Sheet 2026

The 30 highest-yield CCST facts, distilled from real exam questions. Print it, save it as a PDF, or study it here — free, no sign-up.

1. Which type of network attack involves an attacker sending gratuitous ARP replies to associate their MAC address with a legitimate IP address? → ARP poisoning
2. Which of the following is a valid private IP address range as defined by RFC 1918? → 172.16.0.0–172.31.255.255
3. Which wireless mode allows an access point to connect to a wired network and provide wireless connectivity to clients? → Infrastructure mode
4. What does ipconfig /all show? → Network config
5. When troubleshooting a routing issue, a technician uses 'show ip route' and sees a route marked with 'C'. What does 'C' signify? → A directly connected network
6. What type of cable is required to directly connect two switches together without an uplink port? → Crossover cable
7. What is the purpose of Syslog in a network environment? → To collect and store log messages from network devices for monitoring and troubleshooting
8. What type of address is FF:FF:FF:FF:FF:FF? → Broadcast MAC address
9. Which private IP address range is defined by RFC 1918 for Class A networks? → 10.0.0.0 – 10.255.255.255
10. A technician runs 'nslookup cisco.com' and receives a 'Non-existent domain' error. What is the MOST likely cause? → The DNS server cannot resolve the name
11. What is the valid host range for the subnet 192.168.100.128/26? → 192.168.100.129–192.168.100.190
12. What is the PRIMARY purpose of obtaining CCST certification in Cisco Certified Support Technician Networking? → To demonstrate verified competency and adherence to professional standards
13. What is the purpose of a VLAN (Virtual Local Area Network)? → To logically segment a physical network into separate broadcast domains
14. How many usable host addresses are available in a /30 subnet? → 2
15. Which supernet correctly summarizes the subnets 192.168.4.0/24 through 192.168.7.0/24? → 192.168.4.0/22
16. What is the total number of IPv4 addresses in a /22 subnet? → 1024
17. What command shows active connections? → Netstat
18. What is the purpose of the 'ipconfig /release' command followed by 'ipconfig /renew' on a Windows PC? → Release the current DHCP lease and request a new IP address
19. Which protocol is used to transfer Cisco IOS images and configuration files to and from a router or switch using a simple, lightweight file transfer mechanism? → TFTP
20. What is two-factor authentication? → Two login methods
21. Which command on a Cisco router shows the current routing table including all known routes? → show ip route
22. Which layer of the OSI model is responsible for routing? → Network layer
23. What is the default subnet mask for a Class B IP address? → 255.255.0.0
24. How many subnets are created when you borrow 3 bits from the host portion of a Class C network? → 8
25. What is the MOST effective way for new CCST professionals to build competency? → Combining formal education, mentored practice, and ongoing professional development
26. A technician needs to verify that TCP port 443 is open on a remote server. Which command can test this from a Windows command prompt? → telnet 10.0.0.1 443
27. What does the output 'Request timed out' from a Windows ping command indicate? → The destination did not respond within the timeout period
28. What does AAA stand for in the context of Cisco network security? → Authentication, Authorization, Accounting
29. A cable is suspected of being faulty. Which physical layer tool can test cable continuity and pair mapping? → Cable tester
30. A user's computer shows 'Limited connectivity' and has an IP address of 169.254.x.x. What does this indicate? → DHCP failed and the host assigned itself an APIPA address